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Corporate  weblogs  are  rife  with  legal  liabilities.  Before  your  Starwood  Hotels  books  HP  to  replace  IBM  as  its  outsourcing 

company  sponsors  one,  lake  these  precautions,  page  40  vendor  and  help  it  move  off  the  mainframe,  page  5 
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Ultradense  server  racks,  disaster  recovery  requirements 
and  IP  networks  are  forcing  big  changes  in  the  way  new 


data  centers  are  built.  By  Gary  H.  Anthes  PAGE  23 


E-VOTING’S  BIG  TEST 

Feds  release  reference  versions 
of  vendors’  e-voting  code 
for  integrity  checks,  PAGE  4 

Early  voting  turns  up 
some  IT  glitches.,  but  officials  defend 
©•voting  systems.  PAGE  4 

E-voting  flaws  could  make  all  of  IT  look 
bad.  says  columnist  Dan  Gillmor.  PAGE  18 


Software  Vendors’  Audit 
Requests  Irk  IT  Managers 


Some  view  Sarb-Ox 
tie-ins  as  a  ploy,  others 
see  nothing  amiss 

BY  THOMAS  HOFFMAN 

LAS  VEGAS 

A  number  of  software  vendors 
are  requesting  that  large  cor¬ 
porate  customers  conduct 
self-audits  against  their 
software  usage,  allegedly 
to  help  the  suppliers 
meet  Sarbanes-Oxley 
regulatory  require¬ 
ments,  according  to  sev¬ 
eral  attendees  at  an  IT 
asset  management  conference 
held  here  last  week. 

A  corporate  purchasing  di¬ 
rector  at  a  large  Midwestern 
financial  services  company 
who  requested  anonymity  said 
his  organization  recently  re¬ 


ceived  a  letter  from  Sunny¬ 
vale,  Calif.-based  Interwoven 
Inc.  requesting  that  the  com¬ 
pany  conduct  a  self-audit  of 
its  use  of  TeamSite,  Interwo- 
ven’s  enterprise  content  man¬ 
agement  system. 

The  letter  said  the  audit 
was  required  to  help  Interwo¬ 
ven  meet  the  Sarbanes-Oxley 
Act’s  compliance  man¬ 
dates  but  didn’t  men¬ 
tion  which  regulatory 
requirements  had  to 
be  met,  said  the  pur¬ 
chasing  manager.  “It 
seemed  like  a  soft-step 
approach  to  get  us  to  conduct 
an  audit,”  he  said. 

His  company  ended  up  con¬ 
ducting  the  audit.  It  then  re¬ 
viewed  the  results  with  its  le¬ 
gal  department  and  informed 
Audit,  page  51 


GM,  Boeing 
Push  Identity 
Management 

Expect  sfflHe-sign-on 
rollouts  to  lower  costs, 
improve  access  to  apps 

BY  JAIKUMAR  VIJAYAN 

DENVER 

General  Motors  Corp.  plans  to 
migrate  its  end-user  identity 
management  services  to  a  sin¬ 
gle  global  system  over 
the  next  several  years  as 
part  of  a  broad  initiative 
to  improve  IT  efficiency 
and  reduce  the  automak¬ 
er’s  operational  costs. 

When  it’s  completed, 


the  consolidated  identity  man¬ 
agement  system  will  enable 
universal  application  access 
and  single-sign-on  capabilities 
for  about  500,000  end  users, 
including  GM  employees  and 
workers  at  suppliers,  contrac¬ 
tors  and  other  business  part¬ 
ners,  according  to  Tony  Scott, 
the  company’s  chief  technol¬ 
ogy  officer. 

The  new  infrastructure  will 
replace  numerous  silos  of 
identity  information  at  GM 
and  will  play  a  crucial  role  in 
its  ongoing  move  toward  a 

global  supply  chain  and 
manufacturing  model, 
Scott  said  at  the  Digital 
Identity  World  confer¬ 
ence  here  last  week. 

“The  supplier  and  de- 
ID  Management,  page  14 
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YOU  MAY  NOT  HAVE  TIME  TO  STUDY 
THE  TCO  OF  WINDOWS  AND  LINUX, 
BUT  THE  YANKEE  GROUP  DOES. 


Microsoft 


"For  midsized  and  large  organizations,  a  significant 
Linux  deployment  will  neither  be  free  nor  easily 
accomplished.  In  fact,  respondents  at  large 
organizations  reported  that  a  wholesale  switch  to 
Linux  from  Windows *  or  Unix  would  significantly 
increase  TCO  for  the  forseeable  future." 


- Laura  DiDio,  The  Yankee  Group,  April  2004 
Linux,  Unix,  and  Windows  TCO  Comparison 


The  Yankee  Group,  a  global  research  and  consulting  firm,  concluded  that 
a  significant  switch  to  Linux  from  Windows  or  Unix  could  cost  three  to  four 
times  as  much  without  delivering  tangibly  better  performance  or  business 
value.  These  findings  are  based  on  a  non-sponsored  worldwide  survey  of  1,000 
IT  administrators  and  C-level  executives  in  midsized  and  large  enterprises. 

To  get  the  full  study,  visit  microsoft.com/getthefacts 


Microsoft* 

Windows 
Server  System 


C  2004  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  Windows,  the  Windows  logo,  and  Windows  Server  System  are  either  registered  trademarks  or  trademarks  of  Microsoft 
Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 
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Building  a  Roacmw 

to  SC  MAGAZINE  AWARDS 

Plus  2  tickets  to  S 


Date:  Febmary  14,  2005 
San  Francisco 

Visit  ca.com/etrust/workshop 

for  information  and  to  register  to  win. 


€  2004  Computer  Associates  International,  Inc.  (CA).  All  rights  reserved. 
NO  PURCHASE  NECESSARY.  Visit  ca.com/etrust/vvorkshop  for  Official  Rules 
and  prize  details.  Must  register  by  January  5,  2005.  Must  be  21  or  older  to 
enter.  Void  outside  of  the  United  States,  in  Florida  and  where  prohibited. 


It  takes  an  integrated  security  solution  to  make  sure  the 
right  people  have  the  right  access  at  the  right  time. 

eTrusf  Identity  and  Access  Management  Solutions 

These  days,  a  vital  aspect  of  security  management  is  providing  customized 
levels  of  access  for  countless  employees  and  partners  while  also  protecting 
your  customers  from  identity  theft.  That's  one  complicated  job-and  one  that 
can  be  made  much  easier  with  CA's  eTrust  Identity  and  Access  Management 
(1AM)  Solutions.  They  enhance  security  and  reduce  costs  by  automating 
processes  and  enabling  self-administration,  in  addition  to  providing  policy-based 
cross-platform  protection  for  web,  mainframe,  and  application  resources 
enterprise  wide.  To  find  out  how  CA's  1AM  solutions  can  improve  your  business, 
attend  one  of  our  workshops,  ca.com/etrust/workshop 
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OpenVMS  Survives  and  Thrives 

In  the  Technology  section:  The  OpenVMS 
operating  system  gets  a  new  lease  on  life 
as  it  moves  to  64-bit  Itanium,  and  for  users 
like  Sony’s  Daniel  Sanchez  Reina,  its  relia¬ 
bility  makes  it  a  no-brainer.  Page  28 
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Outsourcing  Tuneup 

In  the  Management  section:  Do  last 
year’s  outsourcing  decisions  support 
this  year’s  business  strategy?  Ask  these 
10  questions  to  find  out.  Page  37 
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tribute  has  enabled  them  to 
contribute  to  our  lives. 

18  Dan  Gillmor  has  a  prediction 
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to  be  technologically  messy. 
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that  the  best  way  to  help  his 
company  thrive  is  to  keep  sys¬ 
tems  simple  and  automate  just 
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34  Bruce  Schneier  says  that  the 
ultimate  answer  to  security 
vulnerabilities  is  to  make  the 
software  vendors  liable  for 
the  holes  in  their  products. 

44  Paul  Glen  has  a  problem  with 
people  who  propose  solutions 
without  first  articulating  the 
problem.  IT  should  be  able  to 
help  its  clients  eliminate  such 
fuzzy  thinking,  he  says. 
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Products  to  Prevent  Data  Theft 
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tions  Israel  offers  a  guide  to  buying  technol¬ 
ogy  to  safeguard  your  critical  information. 
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IT  MANAGEMENT:  CA  architect  Stevie  Sacks 
outlines  how  to  cut  IT  costs  by  making  busi¬ 
ness  units  accountable  for  their  consumption 
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E-voting  Updates 

NEWS:  How  is  electronic  voting  working  in 
this  election?  Stay  up  to  date  this  week  on  all 
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Textron,  CSC  Sign 
Outsourcing  Deal 

Computer  Sciences  Corp.  said  it 
has  signed  an  IT  outsourcing  con¬ 
tract  with  Textron  Inc.  that’s  ex¬ 
pected  to  be  worth  about  $1.1  bil¬ 
lion  over  the  next  10  years.  CSC 
will  manage  the  Providence,  R.I.- 
based  conglomerate’s  global  data 
center,  help  desk  and  network 
operations,  plus  its  servers  and 
desktop  systems.  About  250  IT 
workers  at  Textron  will  be  offered 
jobs  at  CSC  as  part  of  the  deal. 


Oracle  Sets  Release 
Date  for  New  Apps 

Oracle  Corp.  said  it  plans  to  ship 
the  latest  version  of  its  ERP  appli¬ 
cations  next  Monday,  although  a 
spokeswoman  noted  that  logisti¬ 
cal  issues  could  delay  the  release 
by  a  few  days.  Oracle  announced 
the  E-Business  Suite  lli.10  soft¬ 
ware  at  its  OpenWorld  conference 
in  early  September  and  has  al¬ 
ready  released  some  modules, 
including  its  CRM  applications. 


Revenue  Down  at 
i2;  Sales,  Profits  Up 

Supply  chain  software  vendor  i2 
Technologies  Inc.  reported  a  5% 
dip  in  third-quarter  revenue  com¬ 
pared  with  its  year-earlier  results. 
But  Dallas-based  i2  said  its  soft¬ 
ware  license  sales  rose  21%  year 
over  year  to  $17  million.  Profits 
more  than  doubled,  it  said. 


Cybercrime  Arrests 
Net  28  Suspects 

The  U.S.  Secret  Service  said  it 
has  arrested  28  people  from  eight 
U.S.  states  and  six  countries  for 
alleged  involvement  in  a  global 
cybercrime  ring.  The  Secret  Ser¬ 
vice  claimed  that  the  suspects 
had  collectively  trafficked  in  at 
least  1.7  million  stolen  credit  card 
numbers  and  caused  $4.3  million 
in  losses  among  banks. 


Feds  Issue  Test  Copies 
Of  E-voting  Software 

Officials  can  match  digital  signatures  to 
reference  copies,  but  initial  use  is  limited 


BY  DAN  VERTON 

EDERAL  OFFICIALS  last 
week  released  a  set  of 
software  Files  submit¬ 
ted  by  five  vendors  of 
e-voting  systems  and  voting 
verification  tools,  saying  that 
election  officials  can  use  the 
code  and  related  digital  signa¬ 
tures  to  check  whether  the 
software  they  have  bought  has 
been  modified  without  their 
knowledge. 

But  the  so-called  reference 
data  set  issued  by  the  National 
Institute  of  Standards  and 
Technology  will  likely  be  of 
little  use  to  state  officials  for 
verifying  the  integrity  of 
e-voting  systems  being  used  in 
tomorrow’s  election.  And  the 
future  value  of  the  files  could 
be  limited  for  states  that  have 
customized  their  e-voting 
software. 

The  National  Software  Ref¬ 
erence  Library’s  (NSRL)  Web 
site  said  the  files  typically  can 
be  used  only  to  check  software 
that  has  yet  to  be  installed  on 
a  voting  machine.  The  notice 
added  that  “with  limited  ex¬ 
ceptions,”  e-voting  software 
can’t  generate  digital  signa¬ 
tures  after  it  has  been  installed. 

The  NSRL  notice  also  said 
that  election  authorities  using 
software  that  has  been  legiti¬ 
mately  altered  won’t  be  able  to 
use  the  reference  data  set  to 
compare  digital  signatures. 
Only  signatures  derived  from 
the  identical  product  releases 
submitted  by  the  Five  vendors 
are  available  on  the  NSRL’s 
Web  site. 

Vendors  that  had  provided 
software  to  the  NSRL  as  of 
Oct.  22  include  Diebold  Inc., 
Election  Systems  &  Software 
Inc.,  Hart  InterCivic  Inc.,  Se¬ 
quoia  Voting  Systems  Inc. 
and  VoteHere  Inc.  Oakland, 
Calif.-based  Sequoia  said  it 
has  made  several  submissions 
over  the  past  two  weeks. 


Bellevue,  Wash.-based  Vote¬ 
Here  said  in  late  June  that  it 
had  submitted  a  reference 
source-code  implementation 
for  inclusion  in  the  NSRL. 
Omaha-based  F.S&S  made  a 
similar  announcement  in  Au¬ 
gust,  and  Austin-based  Hart 
InterCivic  followed  suit  in 
mid-October.  North  Canton, 
Ohio-based  Diebold  couldn’t 
be  reached  for  comment. 

Facing  Skepticism 

The  submissions  were  made 
after  the  U.S.  Election  Assis¬ 
tance  Commission  called  on 
all  e-voting  software  vendors 
to  provide  code  to  the  NSRL. 
In  a  letter  dated  July  13,  com¬ 
mission  Chairman  DeForest 
Soaries  Jr.  said  having  access 
to  the  code  would  “facilitate 
the  tracking  of  software  ver- 


SINCE  early  voting  began  on  Oct. 
18  in  Florida  and  at  least  seven 
other  states  where  tight  presi¬ 
dential  contests  are  expected, 
voters  have  reported  hundreds  of 
problems  to  the  Election  Incident 
Reporting  System,  some  of  which 
resulted  from  technical  glitches  in 
the  computers  being  used  to  sup¬ 
port  the  voting  process. 

The  incident  reporting  system 
is  an  online  database  set  up  by 
grass-roots  organizations,  in¬ 
cluding  Verified  Voting  Founda¬ 
tion  Inc.  and  Computer  Profes¬ 
sionals  for  Social  Responsibility. 
Of  the  666  incidents  reported  in 
Florida  as  of  last  Wednesday,  33 
were  linked  to  alleged  malfunc¬ 
tions  of  e-voting  systems  in  nine 
counties.  In  Broward  County,  for 
example,  some  voters  claimed 
that  touch-screen  systems  pre¬ 
sented  incomplete  ballots. 

Alia  Faraj,  a  spokeswoman  for 
Florida  Deputy  Secretary  of 


sion  usage.”  Some  observers 
have  claimed  that  vendors  have 
installed  patches  and  upgrades 
prior  to  elections  without  let¬ 
ting  officials  inspect  the  code 
First.  Sequoia  spokesman  Alfie 
Charles  said  the  NSRL  is  stor¬ 
ing  “pristine  copies”  of  vendor- 
submitted  software  “to  help 
prepare  for  the  inevitable  chal¬ 
lenges  that  take  place  whenev¬ 
er  there  are  close  elections.” 

But  Avi  Rubin,  a  professor  at 
Johns  Hopkins  University  who 
has  criticized  e-voting  securi¬ 
ty  controls,  called  the  NSRL 
“smoke  and  mirrors.”  Rubin 
said  that  if  e-voting  software 
“is  already  rigged,  storing  the 
[digital  signature]  hashes  only 
guarantees  that  the  malicious 
code  will  be  there  if  the  hash¬ 
es  match.” 

Kim  Alexander,  president  of 
the  California  Voter  Founda¬ 
tion,  called  the  vendor  sub¬ 
missions  good  news,  but  only 
if  there  are  no  last-minute 


State  Dave  Mann,  said  that  con¬ 
trary  to  news  reports,  there  have 
been  no  problems  related  to  any 
of  the  touch-screen  e-voting  sys¬ 
tems  being  used  in  the  state  dur¬ 
ing  the  early  voting  period.  “The 
touch-screen  systems  have  been 
operating  as  planned,”  Faraj  said. 

The  only  problems,  she 
added,  involved  laptop  PCs  that 
were  used  to  check  voter-regis¬ 
tration  rolls  in  some  counties. 
Those  problems  were  fixed  im¬ 
mediately  by  a  simple  reboot  of 
the  laptops,  Faraj  said. 

Will  Doherty,  executive  direc¬ 
tor  of  the  San  Francisco-based 
Verified  Voting  Foundation,  said 
that  despite  Faraj’s  characteriza¬ 
tion  of  the  laptop  malfunctions 
as  minor,  his  organization  is 
aware  of  dozens  of  Florida  vot¬ 
ers  who  were  turned  away  from 
the  polls  “because  of  that  minor 
system  crash.” 

Doherty  also  said  there  have 


EXCERPT 

“This  effort  is  a  first 
step  in  being  able  to 
trace  software  from 
the  vendor  through  the 
accreditation  process 
to  the  states  and  other 
purchasers  of  voting 
systems.  Now  election 
authorities  have  a 
reference  database  to 
compare  with  the 
digital  signatures  of 
software  provided  to 
them  by  vendors.” 


changes  to  the  software.  “If 
there  are  technical  problems 
with  software  vote  counts  on 
election  night,  it’s  possible 
that  vendors  will,  as  they  have 
in  the  past,  install  patches  or 
upgrades  to  get  the  vote  count 
started  again,”  she  said. 

Election  officials  will  have 
to  keep  a  public  audit  log  of  all 
software  testing  and  installa¬ 
tions  to  ensure  that  there’s  no 
appearance  of  impropriety, 
Alexander  added.  ©  50423 


been  multiple  reports  of  touch¬ 
screen  calibration  problems  in 
Florida.  Some  voters  have  said 
that  when  they  touched  the 
screen  next  to  their  candidate’s 
name,  the  screen  highlighted  the 
name  of  the  opposing  candidate, 
according  to  Doherty. 

'  In  addition  to  the  Florida  coun¬ 
ties,  localities  in  Colorado,  Ten¬ 
nessee  and  Texas,  as  well  as  two- 
thirds  of  Georgia's  counties,  have 
experienced  connection  prob- 

•  lems  between  their  early  voting 

:  sites  and  the  central  servers  that 

hold  voter  registration  databas¬ 
es,  said  VotersUnite,  a  nonparti¬ 
san  voter  advocacy  group. 

Alfie  Charies,  a  spokesman  for 
Sequoia  Voting  Systems,  said  it's 

*  important  not  to  confuse  a  minor 
glitch  in  a  voter-registration  sys¬ 
tem  with  voting  problems.  All 
touch-screen  systems  are  report¬ 
edly  operating  normally,  he  said. 

-  Dan  Verton 


Officials  Defend  Systems,  Despite  Early  E-voting  Problems 
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Tech  Standards  Set  Tone  for  On-Demand  Systems 


IT  managers  cite  need  for  application 
flexibility  and  broader  data  integration 


BY  PATRICK  THIBODEAU 

NEW  YORK 

When  The  Museum  of 
Modern  Art  undertook  an 
$858  million  renovation  and 
expansion  project  eight  years 
ago,  it  gave  CIO  Steve  Peltz- 
man  a  blank  canvas  for  rebuild¬ 
ing  its  data  center  and  systems. 

Peltzman  said  last  week  that 
he’s  making  the  most  of  the 
opportunity.  His  staff  is  re¬ 
moving  IT  silos  and  integrat¬ 
ing  systems,  with  the  goal  of 
creating  what  he  described  as 
an  “Amazon-like”  flow  of  in¬ 
formation  that  lets  MOMA’s 
business  users  access  data  no 
matter  where  it’s  stored. 

Peltzman  spoke  at  a  forum 
held  here  by  IBM  to  mark  the 
second  anniversary  of  its 
on-demand  computing  initia¬ 
tive.  Other  vendors,  such  as 
Hewlett-Packard  Co.  with  its 
adaptive  enterprise  strategy, 
also  are  championing  the  use 
of  highly  integrated  and  flexi¬ 
ble  systems.  But  underpinning 
the  marketing  terms  is  some¬ 
thing  IT  managers  have  un¬ 
derstood  for  years:  the  need  to 
support  open  standards. 

“Anybody  who  realizes  that 
integration  has  got  to  be  the 
way,  and  who  is  dealing  with  a 
lot  of  legacy  information,  it’s 
got  to  be  obvious  [to  them] 
that  open  standards  is  going  to 
make  that  easier,”  Peltzman 
said  in  an  interview. 

Peltzman  and  other  users 


said  adherence  to  open  tech¬ 
nologies  such  as  XML,  J2EE 
and  SOAP  is  critical.  But  many 
added  that  vendors  continue 
to  knock  on  their  doors  with 
proprietary  products  in  hand. 

Chris  Dorsey,  CIO  at  Chase- 
Pitkin  Home  &  Garden,  a  divi¬ 
sion  of  Wegmans  Food  Mar¬ 
kets  Inc.  in  Rochester,  N.Y.,  is 
building  an  integrated  inven¬ 
tory  and  order  management 
system.  The  ability  to  share  in¬ 
formation  and  improve  busi¬ 
ness  intelligence  is  central  to 
the  project,  he  said. 

But  Dorsey  noted  that  one 
vendor  pitched  an  order  entry 


Hotel  chain  plans 
phaseout  of  its 
IBM  mainframes 

BY  PATRICK  THIBODEAU 

IT  flexibility  has  become  vital 
to  Starwood  Hotels  &  Resorts 
Worldwide  Inc.  And  to  try  to 
make  that  a  reality,  Starwood 
has  immersed  itself  in  a  proj¬ 
ect  called  Fusion  that  tightly 
couples  its  IT  plans  with  busi¬ 
ness  needs  and  includes  a  new 
reservation  system  that  will 
link  many  of  the  company’s 
hospitality  services  and  make 
them  more  accessible  online. 

Starwood  last  week  said 
that  it  has  signed  a  seven- 
year,  $100  million  technology 
and  outsourcing  deal  with 
Hewlett-Packard  Co.,  which 
will  help  develop  the  J2EE- 
based  reservation  system  and 
then  manage  it  while  provid¬ 
ing  a  variety  of  other  IT  ser¬ 
vices  to  White  Plains,  N.Y.- 
based  Starwood  (see  box). 

HP  is  replacing  IBM  as  Star- 
wood’s  outsourcing  vendor, 
and  the  decision  to  build  a  ser¬ 
vice-oriented  architecture  for 
the  new  reservation  system 
means  that  the  hospitality 


system  with  a  graphical  user 
interface  that  looked  as  if  it 
used  Java  and  XML  when  in 
fact  it  didn’t.  The  vendor  put 
“window  dressing  on  it  to 
make  it  appear  to  be  more 
open-standards-based  and 
user-friendly,  when  in  reality, 
it  isn’t  that  flexible  or  cus¬ 
tomizable,”  Dorsey  said. 

Gaining  Leverage 

Users  said  that  in  many  cases, 
they’re  willing  to  give  up  the 
functionality  that’s  included  in 
a  proprietary  product  because 
one  built  on  open  standards 
gives  them  more  leverage  with 
technology  vendors. 

The  ability  to  “pluck  out” 
applications  that  aren’t  meet¬ 
ing  business  needs  “gives  me 


company  will  gradually  end 
its  use  of  the  IBM  mainframes 
that  run  its  existing  Cobol- 
based  applications. 

Tom  Conophy,  Starwood’s 
chief  technology  officer,  said 
the  goal  is  to  create  a  system 
that  can  handle  room  rentals 
plus  a  range  of  other  services, 
such  as  spa  reservations  for 
hotel  guests.  In  addition,  im¬ 
proved  integration  of  back¬ 
end  systems  will  allow  for 
more-sophisticated  credit 
card  processing  functions, 
he  said. 

Handle  Future  Growth 

Starwood’s  IT  team  looked  at 
IBM’s  ability  to  run  Linux  on 
the  mainframe.  But  Conophy 
said  the  company’s  long-term 
direction  of  its  IT  architecture 
hinged  on  moving  from  a 
mainframe  environment  to 
lower-cost  Unix  and  Linux 
systems  that  could  easily  in¬ 
crease  in  size  to  handle  future 
business  growth. 

Conophy  said  the  new  sys¬ 
tem  should  help  Starwood 
save  $15  million  to  $20  million 
annually  in  IT  operating  costs. 

As  part  of  the  project,  Star¬ 
wood  will  install  HP’s  Itani- 


leverage  and  also  challenges 
vendors  in  a  different  kind  of 
way,”  said  Sherra  Pierre,  vice 
president  of  information  ser¬ 
vices  at  Sesame  Workshop,  the 
New  York-based  nonprofit 
group  that  produces  Sesame 
Street  and  other  educational 
programming  for  children. 

“IT  is  no  longer  about  build¬ 
ing  specific  applications;  it  re¬ 
ally  has  become  more  fluid  in 
its  delivery,”  Pierre  said. 

David  Balik,  president  of 
General  Glass  International 
Corp.  in  Secaucus,  N.J.,  said 
he’s  pleased  with  his  IBM  sys¬ 
tems  but  doesn’t  feel  joined  at 
the  hip  with  the  vendor.  “An 
awful  lot  of  the  applications 
are  quite  portable  to  other 
places,  so  the  ‘gotcha’  factor,  I 


HP  will  handle  the 
following  IT  tasks 
for  Starwood: 

OPERATE  the  company's  core 
computing  complex  and  its 
messaging  systems. 

PROVIDE  network  manage¬ 
ment  and  multivendor  server 
support  services. 

ASSIST  with  application  devel¬ 
opment  and  host  Starwood’s 
Web  sites. 

BUILD  an  upgraded  disaster 
recovery  facility. 

um-based  Superdome  high- 
end  systems  running  a  mix  of 
HP-UX  and  Linux.  HP-UX 
will  be  used  on  the  company’s 
database  servers,  and  Cono¬ 
phy  said  the  Unix  operating 
system  is  well  designed  to 
work  with  the  Superdome 
hardware  —  a  strength  that  it 
has  over  Linux.  Starwood  also 
plans  to  use  HP’s  x86-based 
ProLiant  servers. 

The  company,  which  owns 
Sheraton  Hotels  &  Resorts, 
Westin  and  other  hospitality 
chains  and  operates  738  hotels 


Starwood  Taps  Hewlett-Packard  for 
System  Development,  Outsourcing  Deal 


think,  is  a  lot  less,”  Balik  said. 

Even  so,  IBM’s  on-demand 
effort  is  making  it  easier  for  IT 
managers  to  sell  open-source 
and  open  standards  concepts 
to  business  executives,  said 
Robert  Rosen,  who  heads  the 
Share  user  group  in  Chicago. 

MOMA  is  scheduled  to 
open  its  revamped  facility  on 
Nov.  20,  but  Peltzman  said  the 
work  to  integrate  its  depart¬ 
mental  systems  will  continue 
for  months  to  come.  The  mu¬ 
seum  is  using  IBM’s  iSeries 
servers  and  WebSphere  soft¬ 
ware  as  part  of  the  project, 
which  involves  developing  a 
system  architecture  that  en¬ 
ables  all  its  databases  to  share 
information.  For  instance,  the 
museum  is  linking  its  mem¬ 
bership  and  retail  systems  to 
help  it  reach  out  to  potential 
members.  ©  50421 


in  82  countries,  outsourced  its 
data  center  operations  to  IBM 
six  years  ago.  IBM  declined  to 
comment  about  the  new  con¬ 
tract  with  HP,  which  Starwood 
negotiated  when  the  deal  with 
IBM  came  up  for  renewal. 

IBM  is  as  capable  as  HP  is  in 
providing  technology,  Cono¬ 
phy  said.  He  added  that  the 
decision  to  switch  to  HP  as  an 
outsourcer  was  based  on  its 
willingness  to  be  more  flexible 
on  the  terms  of  the  managed 
services  contract  than  IBM 
would  be. 

Among  the  issues  that 
Conophy  cited  was  the  ability 
to  do  third-party  benchmark¬ 
ing.  He  said  he  wanted  to  be 
able  to  use  a  third-party  firm 
to  help  compare  Starwood’s 
IT  service-level  agreements 
against  marketplace  trends 
over  the  course  of  the  con¬ 
tract.  HP  was  more  willing  to 
allow  periodic  benchmarking 
than  IBM  was,  he  said. 

Stan  Lepeak,  an  analyst  at 
Meta  Group  Inc.,  said  the  use 
of  benchmarking  during  an 
outsourcing  contract  could  re¬ 
sult  in  cost  reductions  for 
users  or  commitments  by  ven¬ 
dors  to  improve  performance. 
And  as  more  and  more  data 
center  systems  are  commodi¬ 
tized,  such  benchmarking  is 
becoming  easier  to  do,  Lepeak 
said.  ©  50420 
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Business  Execs  Must 
Learn  to  Embrace  TI  M 

But  convincing  them  that  ILM  can  cut 
costs  and  ease  data  flow  is  a  challenge 


BY  LUCAS  MEARIAN 

ORLANDO 

Corporate  IT  opera¬ 
tions  are  moving 
ahead  with  efforts  to 
develop  information 
life-cycle  management  (ILM) 
schemes  that  can  efficiently 
and  cost-effectively  store  data 
so  that  its  level  of  availability 
is  consistent  with  its  impor¬ 
tance  to  the  business. 

But  users  at  last  week’s  Stor¬ 
age  Networking  World  confer¬ 
ence  here  maintained  that  be¬ 
fore  a  company  can  establish 
an  ILM  policy  or  begin  a 
search  for  products  that  can 
migrate  data  across  tiers  of 
storage,  the  business  side  must 
take  ownership  of  the  project 
and  define  the  importance  of 
different  types  of  data. 

Paul  Seay,  chief  infrastructure 
architect  at  Northrop  Grum¬ 
man  Corp.  in  Los  Angeles,  said 
his  company  is  focusing  on 
convincing  business  groups  of 
the  potential  cost  savings  of 
storing  data  on  the  medium 
that’s  most  appropriate  for  it, 
based  on  its  importance. 


“We’re  focusing  on  the  cul¬ 
tural  problem  first,”  Seay  said. 

Seay  declared  that  standards 
should  be  established  to  iden¬ 
tify  data  on  open  systems,  just 
as  standards  were  developed 
in  the  mainframe  world  to 
identify  data  sets.  XML  could 
help  with  the  tagging  of  meta¬ 
data,  but  a  copy  of  the  applica¬ 
tion  that  created  the  data 
would  have  to  be  maintained 
in  order  to  read  it  in  the  future, 
which  brings  up  digital  rights 


ORLANDO 

EMC  last  week  unveiled  its  long- 
anticipated  storage  virtualization 
technology,  which  the  company 
said  lets  users  manage  its  arrays 
-  and  high-end  boxes  from  major 
competitors  -  through  a  single 
interface. 

“This  is  finally  EMC  giving  in  to 
the  fact  that  storage  is  going  to 
become  virtualized,”  said  Nancy 
Hurley,  an  analyst  at  Enterprise 
Strategy  Croup. 


management  issues,  he  said. 

Ken  Walters,  senior  director 
of  enterprise  platforms  at  the 
Public  Broadcasting  Service  in 
Alexandria,  Va.,  agreed  that 
management  must  agree  to 
create  the  necessary  policies 
and  procedures  before  ILM 
technology  can  be  installed. 

“ILM  is  a  must-do,”  said  Rod 
Mueller,  manager  of  technolo¬ 
gy  and  infrastructure  at  Stam¬ 
ford,  Conn. -based  Internation¬ 
al  Paper  Co.  “ILM  gives  me  a 
huge  competitive  advantage  by 
reducing  the  cost  of  storage.” 
Mueller  said  he  began  pitching 
the  scheme  to  the  company’s 


EMC  said  at  Storage  Network¬ 
ing  World  here  that  its  product, 
called  Storage  Router,  is  a  com¬ 
bination  of  its  own  firmware  and 
so-called  intelligent  switches  and 
directors  from  Cisco  Systems 
Inc.,  Brocade  Communications 
Inc.  and  McData  Corp. 

The  switches  are  among  a 
new  breed  of  storage  technology 
that  uses  application-specific  in¬ 
tegrated  circuits  to  crack  open 
data  packets,  read  the  informa- 


business  units  after 
learning  about  ILM  at 
last  fall’s  conference. 

Today,  International 
Paper’s  seven  units  are 
evaluating  the  validity 
of  their  data  based  on 
its  age  and  how  often 
it’s  used,  he  said. 

Mueller  said  chang¬ 
ing  mind-sets  within 
the  business  has  been 
difficult  because  man¬ 
agers  consistently  re¬ 
quire  that  data  be  stored  on 
top-tier  arrays.  But  he  has 
found  that  once  chargeback  for 
storage  costs  enters  the  con¬ 
versation,  attitudes  change. 

Steve  Duplessie,  an  analyst 
at  Enterprise  Strategy  Group 
Inc.  in  Milford,  Mass.,  said 
technologies  pitched  today  as 
ILM  are  actually  point  prod¬ 
ucts  designed  for  specific 


tion  inside  and  route  the  data. 

Robert  Sadowski,  a  product 
marketing  manager  at  EMC,  said 
that  the  company  will  eventually 
write  its  code  to  a  standard  API 
called  Fabric  Application  Inter¬ 
face,  which  is  being  developed 
by  the  Washington-based  Inter- 
National  Committee  for  Informa¬ 
tion  Technology  Standards. 

EMC  first  tipped  its  hand  about 
Storage  Router  at  its  annual  user 
conference  last  April,  outlining 
plans  to  release  a  beta  version  to 
users  the  following  quarter.  The 


functions  such  as  data 
migration  from  sec¬ 
ondary  storage  to  tape. 
“ILM  is  still  more  hall¬ 
way  discussion  than 
practical  technology,” 
he  said. 

John  Halamka,  CIO 
at  CareGroup  Inc.,  a 
Boston-based  operator 
of  six  hospitals,  has 
developed  an  ILM 
strategy  for  his  100TB 
storage-area  network 
so  that  it  automatically  mi¬ 
grates  patient  documents  and 
medical  images  between  tiers 
of  storage  consisting  of  EMC 
Corp.  Symmetrix,  Clariion  and 
Centera  arrays.  Still  lacking  is 
the  ability  to  manage  data 
movement  at  the  point  of  cre¬ 
ation  by  business  applications 
like  SAP,  Oracle  or  Sybase. 

©  50394 


router,  in  beta  now,  will  ship  in 
the  first  half  of  2005. 

The  product  will  work  with 
EMC’s  Symmetrix  and  Clarriion 
products  as  well  as  Hitachi  Data 
Systems  Corp.’s  9900  series, 
Hewlett-Packard  Co.’s  EVA  line 
and  IBM’s  Enterprise  Storage 
Server,  also  known  as  Shark. 

EMC  said  that  Storage  Router 
can  perform  port-level  process¬ 
ing  at  a  rate  of  30,000  to 
40,000  l/0s  per  second  and 
is  highly  scalable. 

-  Lucas  Mearian 


EMC  ‘Virtualizes’  the  Network 
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“ILM  GIVES  ME 

a  huge  com¬ 
petitive  advan¬ 
tage,”  says 
Rod  Mueller  of 
International 
Paper  Co. 


EMC  Pact  Could  Expand;  Merger  Unlikely 


Dell  CEO  Says 

BY  LUCAS  MEARIAN 

Dell  Inc.  has  been  a  reseller  and 
manufacturer  of  EMC  Corp. 
low-end  and  midrange  arrays 
since  2002.  As  the  partnership 
grows  and  Dell’s  annual  storage 
revenue  passes  the  $1.5  billion 
mark,  Dell  CEO  Kevin  Rollins 
must  clearly  define  his  compa¬ 
ny’s  role  as  a  partner 
and  potential  competi¬ 
tor  to  EMC. 

At  Storage  Network¬ 
ing  World  last  week, 

Rollins  spoke  with  Com- 
puterworld  about  Dell’s 
evolving  relationship 
with  EMC  and  about  his 
plans  to  support  the 


emerging  Internet  SCSI  stan¬ 
dard  to  help  users  manage  in¬ 
creasingly  complex  storage-area 
networks. 

How  much  is  Dell  competing  with 
EMC  as  you  creep  up  the  storage 
stack  and  EMC  creeps  down  the 
stack?  Not  too  much,  because 
most  of  our  business 
will  be  in  the  small-to- 
medium  business  space. 
That’s  why  we  did  the 
partnership. 

Are  there  any  plans  to 
expand  the  agreement  to 
have  Dell  manufacture 
EMC’s  high-end  systems? 


Probably.  Well,  I  don’t  know. 
Maybe.  It’s  so  problematic,  be¬ 
cause  if  they  sell  them  through 
any  channel  partners,  it’s  hard 
for  those  channel  partners  to 
buy  from  us.  Up  until  this  point 
in  time,  it  hasn’t  made  any 
sense. 

Are  Dell  and  EMC  potential  merger 
candidates?  I  don’t  think  so. 

The  partnership  came  about 
because  we’ve  got  the  access  to 
markets,  and  [they’ve]  got  the 
technology  but  can’t  ramp  it. 

We  haven’t  stated  [a  merger] 
as  a  goal.  And  I  think  EMC  is 
very  happy  staying  indepen¬ 
dent.  We  don’t  need  to  join 


each  other,  and  if  we  did,  I’m 
not  sure  what  the  benefit 
would  be. 

How  is  Dell  working  on  standards 
other  than  through  its  member¬ 
ship  in  standards  bodies?  We’re 
not  only  on  them . . .  we’re  try¬ 
ing  to  drive  them.  It’s  clear 
that  as  we  do  that,  there  are 
two  or  three  major  players  that 
don’t  want  that  to  happen  very 
fast. 

Why  are  some  vendors  hoping  to 
slow  down  the  process?  They 
have  their  own  proprietary 
technology,  and  it’ll  force  them 
to  give  that  up  on  behalf  of  an 


industry  standard,  which  will 
mean  customers  will  have 
more  choice  and  can  shift  from 
vendor  to  vendor  or  bring 
[multiple]  vendors  into  their 
shops. 

How  does  the  iSCSI  standard  play 
into  Dell’s  plans?  Our  plans  are 
to  introduce  a  product  in  our 
fourth  quarter. 

What  will  that  be?  An  array  or  a 
network  device?  I  really  can’t 
say  yet. 

Do  you  think  iSCSI  will  overtake 
Fibre  Channel  for  storage  net¬ 
working?  Not  right  away,  but 
over  time,  iSCSI  is  going  to 
pose  a  big  challenge  to  Fibre 
Channel.  ©  50370 


Make  a  name  for  yourself  with  Windows  Server  System™  Microsoft  Windows  Server  System  makes  it 
easier  for  Switzerland's  Federal  Department  of  Foreign  Affairs  (DFA)  to  manage  the  infrastructure  serving 
their  embassies  and  consulates  in  156  countries.  Here's  how:  By  using  Systems  Management  Server  2003 
and  Microsoft®  Operations  Manager  2005,  DFA  can  automatically  update  its  500  remote  servers  from  a 
central  location,  saving  over  $600,000  in  travel  expenses  alone  in  the  past  year.  They've  also  been  able  to 
reduce  the  time  and  cost  of  maintenance,  boost  user  productivity,  and  find  the  time  to  better  prepare  for 
expansion.  Software  that's  easier  to  manage  is  software  that  helps  you  do  more  with  less.  To  get  the  full 
DFA  story  or  to  find  a  Microsoft  Certified  Partner,  go  to  microsoft.com/wssystem 
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EDS  Postpones  Q3 
Earnings  Report . . . 

Electronic  Data  Systems  Corp. 
delayed  the  release  of  its  third- 
quarter  financial  results  from  last 
Monday  to  this  Wednesday,  say¬ 
ing  that  it  was  reviewing  the  value 
of  the  IT  assets  being  used  as  part 
of  its  $8.8  billion  intranet  contract 
with  the  U.S.  Navy.  Auditor  KPMG 
LLP  is  seeking  a  charge  against 
EDS’s  third-quarter  earnings  to 
cover  a  decline  in  the  worth  of  the 
equipment  that  supports  the 
Navy/Marine  Corps  Intranet. 


. . .  And  Offers  Early 
Retirement  Program 

EDS  also  said  it’s  offering  early 
retirement  incentives  to  about 
9,200  of  its  53,000  U.S.  work¬ 
ers.  EDS  expects  about  half  of  the 
eligible  employees  to  accept  the 
buyouts,  although  it  noted  that 
some  of  the  vacated  jobs  would 
likely  have  to  be  filled  again.  The 
early  retirement  offer  is  part  of  a 
plan,  disclosed  in  September,  to 
cut  another  15,000  to  20,000 
jobs  in  the  next  two  years. 


EC  Clears  Oracle’s 
Bid  for  PeopleSoft 

The  European  Commission  has 
given  Oracle  Corp.  the  green  light 
to  proceed  with  its  hostile  take¬ 
over  bid  for  PeopleSoft  Inc.,  re¬ 
moving  the  last  regulatory  road¬ 
block  to  a  deal.  The  commission 
said  it  was  unable  to  find  “suffi¬ 
cient  evidence  of  competitive 
harm”  that  would  result  from  a 
merger.  PeopleSoft  said  its  board 
will  review  the  decision’s  implica¬ 
tions  “in  due  course.” 


Short  Takes 

RED  HAT  INC.  warned  its  Linux 
users  about  an  e-mail  hoax  urging 
recipients  to  download  purported 
software  patches  that  actually 
contain  malicious  code. . . . 
Japan’s  Fair  Trade  Commission 
held  an  initial  hearing  with 
MICROSOFT  CORP.  over  allega¬ 
tions  that  the  company  violated 
the  country’s  antitrust  laws. 


[  ON  THE  MARK 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 


plov&THeNew? 
IWml  RuhhinG/'i 


CIO  Relishes 
‘Guinea  Pig’  Role . . . 

. . .  inside  Microsoft  because  “I  can  realize  value  earlier.” 
So  says  Ron  Markezich,  CIO  for  IT  at  Microsoft.  But 
Markezich  might  easily  be  misconstrued  as  a  senior 
executive  on  the  vendor’s  quality  assurance  team. 

His  staff  is  responsible  for  putting  Microsoft  tech¬ 


nologies  targeted  for  enter¬ 
prise  use  into  the  company’s 
production  IT  environment 
at  their  alpha  stage,  long  be¬ 
fore  they’re  ready  to  ship.  “I 
look  at  our  IT  organization  as 
an  extension  of  our  product 
development  team,”  Mar¬ 
kezich  says.  Given  his  re¬ 
liance  on  prerelease  versions 
of  products,  you’d  think  his 
bosses  would  cut  him  some 
slack  in  delivering  services  to 
Microsoft’s  end  users.  Not  so, 
he  claims.  “I  don’t  feel  like  I 
get  more  slack,”  Markezich 
says,  noting  that  his  service- 
level  requirements  actually 
increased  this  year.  That  logic 
stems  from  the  belief  that 
early  product  adoption  gives 
him  a  head  start  on  improv¬ 
ing  system  capacity,  perfor¬ 
mance  and  reliability  while 
keeping  a  lid  on  costs.  Marke¬ 
zich  cites  his  early  deploy¬ 
ment  of  Exchange  Server 
2003,  which  Microsoft  began 
using  well  before  the  soft¬ 
ware’s  commercial  release. 

He  says  he  was  able  to  elimi¬ 
nate  67  Exchange  Server  2000 
processing  sites  and  consoli¬ 


date  the  company’s  global 
e-mail  system  into  seven  sites 
running  the  newer  software. 
That  has  helped  Markezich 
cut  $100  million  from  what  he 
calls  “sustainer  spend,”  the 
fixed  IT  costs  for  supporting 
employees  —  dropping  the 
annual  total  to  about  $300 
million.  His  next  big  project 
doesn’t  revolve  around  Mi¬ 
crosoft’s  core  software.  He’s 
beginning  to  upgrade  the 
company’s  802.11b  Wi-Fi  in¬ 
frastructure,  most  likely  to 
802.11g  technology.  He  calls 
the  project  “the  world’s 
largest  wireless  WAN  deploy¬ 
ment”  and  says  it  should  be 
done  by  June.  That  doesn’t 
mean  he’s  refraining  from 
putting  Microsoft’s  alpha 
products  through  their  paces, 
though.  In  fact,  Markezich  ac¬ 
knowledges  that  sometimes 
Microsoft  IT  is  the  bottleneck 
on  the  company’s  delivery  of 
new  products.  “A  lot  of  the 
times  a  Microsoft  product 
slips  its  ship  date  is  because 
we  did  not  sign  off  on  it,”  he 
says.  Now  you  know  who  to 
blame. 


CIW  looks  beyond 
alpha  products . . . 

. . .  and  slips  its  R&D  work  into 
“the  office  of  the  future.”  The 

Microsoft  Center  for  Infor¬ 
mation  Work  on  the  compa¬ 
ny’s  Redmond,  Wash.,  cam¬ 
pus  gives  corporate  users  a 
glimpse  of  IT’s  misty  future 
through  a  series  of  hands-on 
demos.  “We’re  out  past  Long¬ 
horn,”  says  Thomas  Gruver,  a 
group  product  manager  who 
oversees  CIW.  The  arrival  of 
Longhorn,  the  next  major  re¬ 
lease  of  Windows,  may  seem 
to  be  taking  forever,  but  for 
Gruver,  it’s  just  around  the 
corner.  He’s  looking  at  tech¬ 
nology  that’s  a  little  further  in 
the  distance,  such  as  a 
blend  of  networking 
and  groupware  tech¬ 
nology  that  will  let 
Tablet  PC  users  share 
data  immediately  on  a 
common  conference 
room  display.  Gruver 
hopes  to  showcase 
that  possibility  to 
CIW  visitors  starting 
next  year.  A  CIW 
highlight,  the  Ring- 
cam,  may  soon  be¬ 
come  a  Microsoft- 
branded  product.  It  contains 
a  half-dozen  mini-cameras  in¬ 
stalled  in  a  ring  plus  a  direc¬ 
tional  microphone  that  can 
locate  a  speaker  at  a  confer¬ 
ence  room  table  and  project 
him  on  PCs  or  video  displays 
during  a  multimedia  confer¬ 
ence  call.  Expect  to,  um,  see  it 
in  2005. 

Forget  Java,  C#  or 
C++  because . . . 

...  the  next  hot  development 
language  is  Flash.  Although 
Kevin  Lynch,  chief  software 
architect  at  San  Francisco- 
based  Macromedia  Inc., 
doesn’t  claim  that  you’ll  nev¬ 
er  need  to  program  in  any¬ 
thing  but  Flash  again,  he  does 
argue  that  if  you’re  creating 
Web-based  applications  that 
need  graphical  user  interfaces 
—  and  which  ones  don’t?  — 


Daily  downloads 
£|Y|  of  Flash  Player 

SOURCE  MACROMEDIA  INC 


Flash  is  the  ideal  technology. 
Why?  He  says  Flash  “needs 
far  less  bandwidth”  for  down¬ 
loading  graphical  pages  be¬ 
cause  it  updates  only  the 
parts  of  a  page  that  contain 
new  information  as  opposed 
to  doing  a  full  page  refresh. 
The  market  size  should  also 
attract  developers.  Lynch  es¬ 
timates  that  500  million  PCs 
are  equipped  with  Flash  Play¬ 
er.  Flash  developers  currently 
use  Macromedia’s  J2EE-based 
Flex  server  software  to  com¬ 
pile  Flash  code.  But  a 
.Net  version  is  in  beta 
now  and  will  likely  go 
gold  early  next  year. 

Faxes  to  use  IP 
networks  in  a . . . 

. . .  new  release  of 
RightFax  from  Cap- 
taris  Inc.  in  Bellevue, 
Wash.  Version  9.0, 
available  this  week, 
includes  an  optional 
board  from  Brook- 
trout  Inc.  that  slips 
into  the  Captaris  fax  server. 
The  board  handles  the  elec¬ 
trical  differences  between  an 
Ethernet  network  and  the 
public  switched  telephone 
network,  while  the  Captaris 
software  smoothes  out  the 
protocol  conflicts  so  a  fax 
that’s  designed  to  be  trans¬ 
mitted  only  over  the  phone 
network  can  use  IP  as  its 
transport  mechanism.  Matt 
Shoening,  chief  operating  of¬ 
ficer  at  Captaris,  acknowl¬ 
edges  that  few  fax-over-IP  in¬ 
stallations  exist  now,  but  he 
insists  that  they’ll  be  here 
someday  because  centralized 
IP-based  network  administra¬ 
tion  cuts  costs.  RightFax  9.0 
also  adopts  Microsoft  SQL 
Server  as  its  data  store,  up¬ 
ping  capacity  from  1  billion 
faxes  to  a  virtually  unlimited 
number.  ©  50369 


“We’re  out 
past  Long¬ 
horn,”  says 
Microsoft’s 

R&D  group. 


SAS,  the  leader  in  business  intelligence  software,  asks... 


Could  your  IT  dollars  be  better  spent? 


SERVICE  LEVEL  MANAGEMENT 


RESOURCE  MANAGEMENT 


CHARGE  MANAGEMENT 


VALUE  MANAGEMENT 


No  business  wants  to  believe  it’s  wasting  precious  IT  dollars.  So  if  executives  and  co-workers  grumble 
about  IT  service,  and  you’re  convinced  those  services  could  be  put  to  better  use,  let  SAS  help. 
With  SAS®  IT  Management  solutions,  you  can  measure,  manage,  understand  and  communicate  the 
quality  of  every  IT  service  more  accurately.  You’ll  know  precisely  how  your  business  is  using  IT 
resources.  Ensure  maximum  performance  and  response  times.  Predict  strategic  and  financial  trends. 
And  clearly  visualize  the  value  of  IT  from  business,  revenue  and  profit  perspectives.  Visit  our  Web 
site  to  learn  more  and  read  our  free  white  paper.  Align  IT  with  Business  and  Budget  Strategies. 
Or  call  us  toll  free  1  866  731  1364. 

www.sas.com/spent 


Author  Nicholas  Carr  and  top  business  influencers  join  in  a  lively  discussion  about  his  controversial  book,  Does  IT  Matter? 
Check  out  our  Web  site  for  more  on  this  informative,  on-demand  Web  seminar. 


The  Power  to  Know. 


SAS  and  ail  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  <8>  indicates  USA  registration 
Other  brand  and  product  names  are  trademarks  of  their  respective  companies.  O  2004  SAS  Institute  Inc.  All  rights  reserved.  299743 US  0904 
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Dei!  Installs  SUSE 
Linux  on  Servers 

Dell  Inc.  said  it  plans  to  preinstall 
Novell  Inc.’s  SUSE  Linux  operating 
system  on  several  of  its  Power- 
Edge  servers  and  fully  support 
users  of  the  software.  Dell  already 
preinstalls  Red  Hat  Linux  on  its 
servers,  but  it  had  offered  SUSE 
Linux  only  as  an  add-on  until  now. 
SUSE  Linux  Enterprise  Server  9 
will  be  available  on  the  PowerEdge 
1850, 2800  and  2850  models, 
with  annual  subscription  fees 
starting  at  $192  per  CPU. 


Nortel  Again  Delays 
Release  of  Results 

Nortel  Networks  Corp.  again  de¬ 
layed  its  release  of  restated  finan¬ 
cial  results  for  2003  as  well  as  its 
numbers  for  the  first  half  of  this 
year.  The  Brampton,  Ontario- 
based  company  was  due  to  report 
the  results  by  the  end  of  October, 
but  CEO  Bill  Owens  said  it  was 
unable  to  meet  the  deadline  “giv¬ 
en  the  enormous  details  and  com¬ 
plexity  involved.”  Nortel  set  mid- 
November  as  its  new  target. 


BEA  Aims  to  Boost 


WebLogic  Business 


Bundled  solutions 
target  vertical 
markets,  IBM 

BY  HEATHER  HAVENSTEIN 

EA  SYSTEMS  INC., 
looking  to  broaden  its 
middleware  business, 
last  week  took  the 
wraps  off  a  solutions  frame¬ 
work  that  can  help  WebLogic 
Platform  users  build  service- 
oriented  architectures  (SOA) 
for  tackling  common  enter¬ 
prise  pain  points  like  boosting 
customer  service. 

The  move  marks  BEA’s  en¬ 
try  into  the  bundled  technol¬ 
ogy  solutions  arena,  tradition¬ 
ally  a  stronghold  for  rival  IBM, 
and  it  is  supported  by  several 
major  software  suppliers. 

The  framework  is  part  of 
BEA’s  Liquid  Computing  ini¬ 
tiative,  unveiled  at  its  user  con¬ 
ference  last  spring.  The  bun¬ 
dled  offering  will  use  BEA’s 


WebLogic  Platform,  through 
its  portlets  and  reusable  ser¬ 
vice-oriented  integration  com¬ 
ponents  called  controls,  to 
build  SOAs  for  five  common 
enterprise  goals:  customer 
service,  employee  service,  ser¬ 
vice  delivery  platforms,  trade 
processing  and  radio  frequen¬ 
cy  identification  capability. 

The  framework  includes  el¬ 
ements  supplied  by  a  slew  of 
partners,  including  SAP  AG, 
Business  Objects  SA,  Docu- 
mentum  Inc.  and  Siebel  Sys¬ 
tems  Inc.,  that  add  to  the  offer¬ 
ing’s  architecture  reference 
blueprint,  workflow  examples, 
best  practices  and  services. 
BEA  plans  to  provide  frame¬ 
works  for  four  vertical  mar¬ 
kets:  telecommunications,  fi¬ 
nancial  services,  manufactur¬ 
ing  and  government. 

Oncology  Therapeutics  Net¬ 
work  Corp.  (OTN),  a  San  Fran¬ 
cisco-based  distributor  of  spe¬ 
cialty  medical  products,  has 


BEA’s  Plan 


■  BEA  Solutions  Frameworks 
are  designed  to  help  extend  the 
WebLogic  Platform  to  build  SOAs 
for  customer  service,  employee 
service,  service  delivery  platforms, 
trade  processing  and  RFID. 

■  The  program  encompasses 

telecom,  financial  services,  manu¬ 
facturing  and  government  markets. 

■  Partners  include  SAP, 
Documentum,  Siebel.  Hyperion, 
Business  Objects.  Interwoven, 
Comergent  and  Epiphany. 


been  talking  to  BEA  about 
using  the  new  frameworks  to 
help  it  integrate  pieces  of  its 
CRM  and  ERP  packages  via  an 
SOA,  said  Rajan  Jena,  an  enter¬ 
prise  architect  at  OTN.  “We 
are  particularly  interested  in  a 
set  of  prebuilt  components  that 
are  a  one-time  effort  to  create 
and  can  be  reused,”  he  said. 


OTN  already  has  used  the 
Web  services  framework  in 
BEA’s  WebLogic  development 
platform  to  streamline  the 
creation  of  a  Web-based  front 
end  for  its  employee  self-ser¬ 
vice  portal.  “It  helps  us  do  our 
round-trip  development  much 
faster  than  plain-vanilla  J2EE,” 
Jena  said.  For  existing  applica¬ 
tions,  OTN  has  used  the 
framework  to  create  a  “fa¬ 
cade”  of  a  Web  services  API 
call  on  top  of  legacy  applica¬ 
tions.  Then  the  applications 
are  exposed  inside  the  portal. 

Companies  need  guidance 
on  many  aspects  of  building 
an  SOA,  such  as  arranging 
Web  services  in  the  right  or¬ 
der,  said  Ronald  Schmelzer, 
a  senior  analyst  at  ZapThink 
LLC  in  Waltham,  Mass.  But 
although  the  new  program 
is  a  forced  response  to  IBM’s 
success  in  the  bundled  solu¬ 
tions  business,  Schmelzer  said 
BEA  runs  the  risk  of  alienating 
its  integration  partners. 

©  50409 


MICROSOFTS  MOVES 

Microsoft  continues  its  push  into  the 
enterprise-level  development  market: 

|%QuickLink  50329 

www.computemorld.com 


Symantec  Tries  to  Move 
Beyond  Security  Tools 


Nextel  Extends  IT 
Deal  With  Amdocs 

Wireless  carrier  Nextel  Communi¬ 
cations  Inc.  has  extended  by  two 
years  an  IT  services  contract 
under  which  Chesterfield,  Mo.- 
based  Amdocs  Ltd.  manages  its 
billing  and  customer  support  sys¬ 
tems.  Reston,  Va.-based  Nextel 
said  the  contract,  originally  a 
nine-year  deal  signed  in  2000, 
will  now  run  through  2011.  Finan¬ 
cial  details  weren’t  disclosed. 


Short  Takes 

The  U.S.  appeals  court  in  Cincin¬ 
nati  vacated  a  preliminary  injunc¬ 
tion  blocking  Sanford,  N.C.-based 
STATIC  CONTROL  COMPONENTS 
INC  from  distributing  chips  it 
uses  to  clone  Lexmark  Inc.’s 

printer  cartridges _ CINGULAR 

WIRELESS  LLC  completed  its  ac¬ 
quisition  of  AT&T  WIRELESS  SER¬ 
VICES  INC.  after  agreeing  to  di¬ 
vest  itself  of  assets  in  11  states. 


BY  JAIKUMAR  VIJAYAN 

Symantec  Corp.  last  week  out¬ 
lined  an  “information  integri¬ 
ty”  strategy  that  users  and  an¬ 
alysts  said  addresses  a  grow¬ 
ing  need  for  a  more  holistic 
view  of  the  operational  and 
security  risks  that  companies 
face. 

But  they  added  that  whether 
the  new  approach  succeeds 
will  depend  on  how  well 
Symantec,  which  is  primarily 
known  for  its  antivirus  tools 
and  firewalls,  can  execute  on 
its  wider  vision. 

As  part  of  the  initiative, 
Symantec  will  deliver  prod¬ 
ucts  and  services  designed  to 
give  companies  a  full  assess¬ 
ment  of  the  risks  and  vulnera¬ 
bilities  they  face  and  then  en¬ 
able  them  to  act  upon  that  in¬ 
formation,  said  Enrique  Salem, 


the  Cupertino,  Calif.-based 
company’s  senior  vice  presi¬ 
dent  of  security. 

For  instance,  a  new  version 
of  Symantec’s  Enterprise  Se¬ 
curity  Manager  software  that 
was  released  last  week  can 
help  companies  identify  com¬ 
pliance  problems  related 
to  regulations  such  as  the 
Sarbanes-Oxley  and  Gramrn- 
Leach-Bliley  acts,  Salem  said. 

Similarly,  other  products 
will  let  companies  capture 
snapshots  of  the  operational 
state  of  their  servers,  PCs,  ap¬ 
plications  and  operating  sys¬ 
tems,  as  well  as  information 
about  their  configuration  set¬ 
tings  and  patch  levels.  Some  of 
those  capabilities  are  available 
now,  but  more  will  be  added  in 
the  future. 

“It’s  a  model  and  a  set  of 


policies  that  CIOs  can  use  to 
manage  their  environment,” 
Salem  said.  “It  stresses  the 
concept  of  understanding 
your  environment,  acting  on 
the  information  and  control¬ 
ling  it.” 

Symantec  user  Dave  Jordan, 
chief  information  security  of¬ 
ficer  for  the  Arlington  County 
government  in  Virginia,  said 
he  thinks  the  idea  makes  sense 
for  security  managers.  “Of 
course,  some  of  this  is  just 
marketing,  but  it’s  not  all  mar¬ 
keting,”  said  Jordan. 

A  Better  View 

At  one  level,  Symantec’s  new 
initiative  is  aimed  at  moving 
the  company  into  new  markets 
now  that  its  core  security 
tools  business  is  saturated, 
according  to  Jordan.  But  he 
added  that  the  company’s 
strategy  could  meet  the  need 
for  a  management  dashboard 
that  gives  an  overall  view  of 
the  operational  and  security 


landscapes  inside  companies. 

Symantec’s  road  map  “pro¬ 
vides  a  framework  to  help 
guide  us,”  said  Shaun  Catlin, 
a  senior  systems  analyst  at 
Atlanta-based  law  firm  Ford 
&  Harrison  LLP.  “It’s  some¬ 
thing  that  we  knew  needed 
to  be  done.” 

The  alignment  of  informa¬ 
tion  from  the  operational  and 
security  sides  should  give 
companies  more  control  over 
possible  risks,  said  Cory  Fer- 
engul,  an  analyst  at  Meta 
Group  Inc.  “What  Symantec  is 
saying  is,  ‘You  can’t  secure 
what  you  can’t  control,  and 
you  can’t  control  what  you 
don’t  understand.’  ” 

Other  vendors,  such  as  IBM 
and  Computer  Associates  In¬ 
ternational  Inc.,  are  making 
similar  pitches,  according  to 
Ferengul.  But,  he  added, 
“there’s  a  lot  of  maturing  that 
has  to  happen”  before  all  of 
the  required  information  can 
truly  be  integrated.  ©  50416 
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Germans  Assess  Linux 
Deployment  Costs 

FRANKFURT 

OUGH  economic  times  in  Ger¬ 
many  have  made  Linux  operating 
systems  and  other  open-source 
products  tantalizing  to  local  business¬ 
es.  Yet  many  remain  hesitant  to  dump 
their  Microsoft  Corp.  software  com¬ 
pletely,  if  only  because  it  performs  rel¬ 
atively  well  and  nearly  everyone  in 
corporate  Germany  uses  it. 

That  was  the  consensus  of  speakers 
at  the  Linux  World  conference  in  Frank¬ 
furt  last  week.  IDC  analyst  Wafa  Mous- 
savi-Amin  warned  users  that  although 
Linux  software  is  basically  free  to  ac¬ 
quire,  it  can  be  costly  to  deploy.  “Busi¬ 
nesses  can  see  costs  pile  up  quickly  for 
support,  maintenance  and,  in  particu¬ 
lar,  training  if  they  lack 
in-house  knowledge,”  he 
said.  “Each  enterprise 
should  carefully  study 
whether  the  low  fee  to  ac¬ 
quire  the  software  will 
offset  these  other  costs.” 

Among  server  operat¬ 


ing  systems  in  Europe,  Linux  grew 
from  a  1%  market  share  in  1999  to  9% 
in  this  year’s  third  quarter,  IDC  said. 
■  JOHN  BLAU,  IDG  NEWS  SERVICE 


Cable  &  Wireless 
Continues  Fire  Sale 

LONDON 

ondon-based  network  operator 
Cable  &  Wireless  PLC  agreed  last 
week  to  sell  its  Japanese  business, 
Cable  &  Wireless  IDC  Inc.,  to  Softbank 
Corp.  for  $133.3  million.  But  C&W  will 
retain  two  international  data  nodes  so 
it  can  continue  to  provide  network  ser¬ 
vices  to  and  from  Japan. 

The  sale  of  the  Japanese  unit  contin¬ 
ues  C&W’s  retreat  from  an  earlier  plan 
to  develop  a  $3.5  billion  global  IP  net¬ 
work.  The  company’s  fortunes  plum¬ 
meted  in  2001,  triggering 
a  series  of  asset  sales, 
thousands  of  layoffs,  the 
dismantling  of  its  global 
data  services  division 
and  an  exit  from  the  U.S. 
and  continental  Europe 
except  for  continued 


support  of  multinational  customers.  In 
January,  C&W  sold  its  U.S.  Web  host¬ 
ing  and  IP  services  units  to  Sawis 
Communications  Corp.  in  Herndon, 
Va.,  for  $155  million. 

■  LAURA  ROHDE,  IDG  NEWS  SERVICE 
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N.Z.  Regulator  Blocks 
Westpac  Outsourcing 

AUCKLAND, NEW  ZEALAND 

ESTPAC  BANKING  CORP.’S  plan 
to  move  its  New  Zealand  main¬ 
frame  processing  to  Australia 
has  been  scuttled  by  the  Reserve  Bank 
of  New  Zealand.  A  cutover  to  an  IBM 
Global  Services  facility  in  Sydney  was 
scheduled  for  earlier  this  month,  but 
just  a  day  before  the  move,  the  Reserve 
Bank  pulled  the  plug. 

Westpac’s  New  Zealand  division, 
based  in  Auckland,  agreed  to  hold  off 
on  the  move  until  the  Reserve  Bank 
finishes  developing  an  outsourcing 
policy.  The  Reserve  Bank  said  that  it’s 
concerned  about  outsourcing’s  poten¬ 
tial  effect  on  the  bank’s  ability  to  con¬ 
tinue  operating  in  a  crisis  and  that 
Westpac’s  proposal  wasn’t  “sufficiently 
robust”  to  address  that  concern. 

■  RANDAL  JACKSON,  COMPUTERWORLD 
NEW  ZEALAND  ONLINE 


Compiled  by  Mitch  Betts. 


Briefly  Noted 

Advanced  Micro  Devices  Inc.  last 
week  unveiled  a  $249  PC  for  the  de¬ 
veloping  world.  The  Personal  Internet 
Communicator  is  a  bare-bones  PC 
with  basic  software,  AMD’s  Geode 
GX500  embedded  processor,  128MB 
of  RAM  and  a  10GB  hard  drive. 

■  TOM  KRAZIT.  IDG  NEWS  SERVICE 


The  government  of  Ghana  recently 
signed  an  agreement  with  Data  Centa 
Ghana  Ltd.  and  Lexis  Nexis  Butter- 
worths  (Pty)  Ltd.  that  will  make  the 
country’s  laws  accessible  online. 
Durban,  South  Africa-based  Lexis 
Nexis  Butterworths  has  similar  proj¬ 
ects  under  way  in  Uganda,  Kenya, 
Tunisia  and  Nigeria. 

■  J0HNYARNEY, 

IDG  NEWS  SERVICE 


Sybase  Inc.’s  Financial  Fusion  Inc. 
subsidiary  in  Concord,  Mass.,  has 
won  a  multimillion-dollar  contract  to 
set  up  an  online  banking  system  for 
Bank  of  China,  one  of  China’s  largest 
banks. 

■  SUMNER  LEMON, 

IDG  NEWS  SERVICE 


Spain’s  PC  market  leaders: 

1.  Hewlett-Packard  Co. 

2.  Acer  Inc. 

3.  Dell  Inc. 

4.  Airis  Computer 

IDC,  LONDON,  OCTOBER  2004 


Users  Call  for  Improved 
Wireless  Management 


BY  MATT  HAMBLEN 

SAN  FRANCISCO 

At  a  conference  held  here  last 
week  by  wireless  industry 
trade  group  CTIA,  IT  man¬ 
agers,  analysts  and  vendors  all 
cited  the  need  to  find  better 
ways  to  deploy  and  manage 
handheld  devices  as  well  as 
wireless  services. 

Vendors  such  as  Sprint 
Corp.  and  Intel  Corp.  an¬ 
nounced  new  managed  ser¬ 
vices  or  upcoming  technolo¬ 
gies  designed  to  help  IT  man¬ 
agers  incorporate  wireless  de¬ 
vices  into  corporate  settings. 
But  it  was  obvious  from  the 
comments  of  some  people  at 
the  conference  that  wireless 
rollouts  can  still  be  frustrating. 

“The  wireless  industry  is 
not  taking  a  clear  answer  to 
the  end  user,”  said  attendee 
Leonard  Loventhal,  referring 


to  both  IT  managers  and  busi¬ 
ness  users.  Loventhal  is  an  ex¬ 
ecutive  vice  president  at  Hon¬ 
olulu-based  Hawaii  Home- 
Loans  Inc.,  which  launched 
wireless  data  services  for  its 
100  loan  officers  nearly  three 
years  ago.  The  process  was 
very  confusing,  especially 
when  it  came  to  picking  hand¬ 
held  devices,  middle¬ 
ware  and  wireless  ser¬ 
vice  plans,  he  said. 

Loventhal  said  that 
thanks  to  help  from 
Sprint  engineers, 

Hawaii  HomeLoans 
has  seen  a  solid  return 
on  its  investments  in 
Treo  600  handheld  de¬ 
vices  from  PalmOne 
Inc.  and  wireless  cards 
for  the  laptop  PCs 
used  by  its  loan  offi¬ 
cers.  Both  technolo¬ 


gies  help  the  workers  do  text 
and  voice  messaging  when 
they’re  out  in  the  field  and  in 
the  office  at  costs  lower  than 
the  prices  companies  typically 
pay  for  communications,  ac¬ 
cording  to  Loventhal. 

But  Loventhal  said  that 
many  of  the  larger  mortgage 
firms  he’s  familiar  with 
haven’t  taken  the  same  path 
because  of  the  complexity  of 
wireless  deployments.  “If  it 
was  easy  to  set  this  up,  more 
companies  would  be  doing  it,” 
he  noted. 

Sprint  said  it’s  be¬ 
ginning  90-day  pilot 
rollouts  of  its  Man¬ 
aged  Mobility  Ser¬ 
vices  offering  at  12 
companies.  The  ser¬ 
vice  is  due  to  be 
launched  early  next 
year  at  a  cost  that  will 
be  “incremental”  on 
top  of  Sprint’s  month¬ 
ly  wireless  service 
fees  of  $40  to  $80  per 
end  user,  said  Rob 
Kermode,  general 


manager  of  the  new  service. 

Kermode  added  that  the 
work  Sprint  did  with  Hawaii 
HomeLoans  is  similar  to  the 
help  it  will  provide  to  Man¬ 
aged  Mobility  Services  cus¬ 
tomers.  The  offering  supports 
devices  running  Windows  or 
PalmOS  and  includes  security 
management  services  such  as 
data  encryption  and  the  abili¬ 
ty  to  remotely  disable  devices. 

Analysts  said  Sprint’s  move 
will  likely  be  quickly  matched 
by  other  wireless  carriers. 
“Wireless  rollouts  are  still 
complex,  despite  all  the  years 
of  working  on  the  problem,” 
said  Bob  Egan,  president  of 
Mobile  Competency  Inc.  in 
North  Providence,  R.I.  “The 
complexity  requires  the  oper¬ 
ators  to  do  some  of  the  heavy 
lifting,  so  Sprint’s  announce¬ 
ment  is  a  good  first  step.” 

Nikhil  Deshpande,  a  busi¬ 
ness  development  director  at 
Intel,  said  the  chip  maker  is 
working  on  technology  de¬ 
signed  to  let  systems  adminis¬ 
trators  use  existing  manage¬ 


ment  tools  to  bring  wireless 
devices  under  the  IT  umbrel¬ 
la.  Intel  began  a  proof-of-con- 
cept  deployment  with  the 
University  of  Arkansas  at  Pine 
Bluff  in  April,  but  Deshpande 
said  the  technology  likely  is 
three  to  five  years  away  from 
commercial  release.  O  50422 


Tom  Krazit  of  the  IDG  News 
Service  contributed  to  this  story. 

MORE  HEWS  ONUNE 

CA  releases  a  tool  for  managing  wireless 
LANs  and  identifying  rogue  users: 

QuickLink  50397 
www.computerworld.com 


Correction 

A  story  about  dual-core  proces¬ 
sors  that  ran  in  last  week’s  Tech¬ 
nology  section  (“CPUs  Rev  New 
Engines")  incorrectly  listed  the 
year  in  which  Intel  Corp.  intro¬ 
duced  its  first  microprocessor,  the 
4004.  Development  of  the  4-bit 
chip  began  in  1969,  and  Intel 
announced  the  device  in  1971. 


LOVENTHAL 

says,  “If  it  was 
easy  to  set 
[wireless]  up, 
more  compa¬ 
nies  would  be 
doing  it.” 
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Expedia  Unit  Offers  Single  Sign-on  for  Travel  Bookings 


DENVER 

Business  travelers  who  use  Ex¬ 
pedia  Corporate  Travel's  Web 
site  can  now  access  its  online 
services  from  within  their  own 
intranets  via  a  single-sign-on  ap¬ 
proach,  using  their  regular  user- 
names  and  passwords. 

The  Bellevue,  Wash.-based 
unit  of  Expedia  Inc.  said  at  the 
Digital  Identity  World  conference 
here  that  it  has  installed  identity 
management  technology  that 
eliminates  the  need  for  cus¬ 
tomers  to  separately  log  on  and 
authenticate  themselves  to  its 
password-protected  Web  site. 


Indiana  University,  which  uses 
Expedia’s  site  to  book  travel  for 
its  employees,  is  testing  the  sin¬ 
gle-sign-on  feature.  “The  bottom 
line  is  that  you  don’t  need  to 
keep  logging  into  systems  to  get 
something  done,”  said  John 
Harner,  director  of  travel  ser¬ 
vices  at  the  Bloomington-based 
university. 

Expedia  has  installed  Oblix’s 
SharelD  federated  identity  man¬ 
agement  software  and  has  part¬ 
nered  with  the  software  vendor 
to  help  users  install  the  required 
single-sign-on  starter  kits  on 
their  systems.  Simon  Tam,  vice 


president  of  product  develop¬ 
ment  at  Expedia  Corporate  Trav¬ 
el,  said  that  existing  users  can 
get  the  Oblix  technology  at  a  dis¬ 
counted  price. 

“What  it  does  is  remove  an 
impediment  for  business  travel¬ 
ers,”  said  Henry  Harteveldt,  an 
analyst  at  Forrester  Research 
Inc.  “It  makes  the  booking  proc¬ 
ess  easier  and  saves  the  traveler 
time.”  Such  improvements  are 
needed  because  a  substantial 
number  of  corporate  users  with 
access  to  Web-based  travel  ser¬ 
vices  don’t  use  them,  he  noted. 

-JaikumarVijayan 


Continued  from  page  1 

ID  Management 

sign  collaboration  we  are  go¬ 
ing  to  need  won’t  tolerate  a 
world  where  you  have  silos  of 
identity  [data],”  Scott  said  in 
an  interview  prior  to  deliver¬ 
ing  his  keynote  speech. 

GM’s  plan  is  a  prime  exam¬ 
ple  of  the  increased  focus 
some  companies  are  putting 
on  identity  and  access  man¬ 
agement  as  a  way  of  cutting 
administrative  costs  and  im¬ 
proving  end-user  access  to  ap¬ 
plications,  said  Pete  Lind- 
strom,  an  analyst  at  Spire  Se¬ 
curity  LLC  in  Malvern,  Pa. 

The  Boeing  Co.  is  another 
large  user  that’s  in  the  midst 
of  a  long-term  effort  to  give 
employees,  customers  and 
suppliers  single-sign-on  ac¬ 
cess  to  a  range  of  applications 
and  computing  services. 

Already,  Boeing  employees 
can  use  their  corporate  log-ons 
to  access  information  on  pass¬ 
word-protected  Web  sites  op¬ 
erated  by  benefits  providers, 
said  Michael  Beach,  an  associ¬ 
ate  technical  fellow  at  the 
Chicago-based  company. 

In  addition,  mechanics  at  a 
major  airline  customer  of  Boe¬ 
ing  can  use  their  regular  user- 
names  and  passwords  to  ac¬ 


cess  electronic  repair  manuals 
stored  on  Boeing’s  internal 
networks.  The  aircraft  maker 
is  working  to  extend  the  capa¬ 
bility  to  other  airlines,  he  said. 

The  drastically  reduced 
number  of  end-user  accounts 
that  need  to  be  maintained 
and  supported  in  such  a  feder¬ 
ated  identity  management  in¬ 
frastructure  has  resulted  in 
“substantial  cost  savings”  and 
improved  user  productivity, 
according  to  Beach. 

The  federated  system  is 
built  around  single-sign-on 
software  from  Cupertino, 
Calif.-based  Oblix  Inc.,  al¬ 
though  Beach  said  that  Boe¬ 
ing  had  to  do  “quite  a  bit  of 
customization.” 

Regulatory  Pressures 

Also  playing  a  key  role  in  dri¬ 
ving  consolidated  identity 
management  projects  are  new 
regulations,  such  as  the  Sar- 
banes-Oxley  Act,  that  require 
companies  to  get  a  better  han¬ 
dle  on  their  application  ac¬ 
cess-control  capabilities,  Lind- 
strom  said. 

“Regulatory  pressures  are 
driving  a  lot  of  what’s  happen¬ 
ing  in  the  security  space,”  said 
Lindstrom.  Implementing  con¬ 
sistent  identity  and  access 
management  tools  can  give 
large  companies  such  as  GM 


and  Boeing  “a  way  of  getting  a 
top-down  look  at  what  legiti¬ 
mate  users  are  doing  with  ap¬ 
plications  and  of  monitoring 
that  access,”  he  added. 

GM’s  existing  identity 
management  infrastructure 
is  “not  an  enterprise  solution,” 
Scott  said,  adding  that  func¬ 
tional  units  such  as  manufac¬ 
turing  and  engineering  control 
their  own  user  identity  infor¬ 
mation. 

The  global  identity  manage¬ 
ment  architecture  and  gover¬ 
nance  model  will  use  a  combi¬ 


nation  of  directory  manage¬ 
ment  technologies,  such  as 
the  Lightweight  Directory 
Access  Protocol  and  Micro¬ 
soft  Corp.’s  Active  Directory, 
Scott  said. 

The  company  also  plans  to 
use  identity  federation  tech¬ 
nologies  based  on  the  Securi¬ 
ty  Assertion  Markup  Lan¬ 
guage  and  Liberty  Alliance 
Project  standards  to  provide 
cross-domain  application  ac¬ 
cess  to  GM  employees  and  ex¬ 
ternal  users.  “A  system  that  is 
not  federated  will  be  impossi¬ 


ble  for  us  to  manage,”  Scott 
said.  “It  would  kill  us  adminis¬ 
tratively.” 

GM  plans  to  hire  a  prime 
contractor  to  install  and  man¬ 
age  the  global  identity  man¬ 
agement  services  once  its  ex¬ 
isting  IT  services  contract 
with  Electronic  Data  Systems 
Corp.  ends  in  June  2006,  ac¬ 
cording  to  Scott.  He  wouldn’t 
disclose  a  specific  deployment 
schedule  or  a  cost  estimate  for 
the  project  but  said  he  expects 
the  tab  to  be  “in  the  millions” 
of  dollars.  ©  50417 


Toledo  Schools  May  Resurrect 
Stalled  PeopleSoft  Implementation 


BY  MARC  L.  SONGINI 

As  it  looks  to  upgrade  its  big- 
iron  ERP  system,  the  public 
school  system  in  Toledo,  Ohio, 
is  also  eyeing  the  resurrection 
of  a  $4.3  million  PeopleSoft 
Inc.  accounting  and  human  re¬ 
sources  software  installation  it 
abandoned  five  years  ago. 

Toledo  Public  Schools 
needs  to  do  something  with 
the  quarter-century-old  ERP 
mainframe  system,  which 
still  relies  on  a  clumsy  green- 
screen  interface,  said  chief 
business  manager  Daniel 
Burns.  He  would  like  to  see  it 
replaced  outright,  or  at  least 
Web-enabled  with  a  menu- 
based  interface  to  help  auto¬ 


mate  tasks  such  as  processing 
purchase  orders. 

“You  want  to  do  it  right  and 
identify  your  risks  and  make 
sure  you  identify  your  costs,” 
Burns  said.  That  includes  “not 
just  the  software  purchase,  but 
the  training,”  he  said. 

One  of  the  main  drivers  be¬ 
hind  an  outright  replacement 
of  the  system  is  the  fact  that 
the  application  is  written  par¬ 
tially  in  Cobol,  and  it’s  diffi¬ 
cult  to  find  staff  to  support  it. 

Burns  intends  to  devise  two 
potential  solutions.  One  might 
involve  throwing  an  easy-to- 
use  Web-based  front  end  on 
the  mainframe,  hiding  the 
back  end’s  complexity  from 


users.  Another  option  would 
be  to  add  a  graphical  user  in¬ 
terface  and  swap  in  a  third- 
party  ERP  application  running 
on  Windows  NT  and  an  Ora¬ 
cle  database.  That  would  keep 
any  future  move  to  a  new  sys¬ 
tem  transparent  to  the  users. 


H  You  want  to 
do  it  right  and 
identify  your  risks 
and  make  sure  you 
identify  your  costs. 


DANIEL  BURNS,  CHIEF  BUSINESS 
MANAGER.  TOLEDO  PUBLIC  SCHOOLS 


In  the  long  run,  Burns  said 
he  would  like  to  implement  a 
joint  human  resources  and  fi¬ 
nancials  ERP  backbone  that 
could  transmit  student  enroll¬ 
ment  information  seamlessly 
between  those  two  systems.  In 
addition,  he  said  he  would  like 
any  new  system  to  support  re¬ 
porting  and  remote  access  and 
be  able  to  extract  human  re¬ 
sources  information,  such  as  a 
teacher’s  profile,  and  put  it  on 
the  Web  for  public  review. 

Since  the  Toledo  school 
district  has  spent  millions  of 
dollars  on  the  PeopleSoft  soft¬ 
ware,  there  could  be  an  advan¬ 
tage  to  resurrecting  that  plan. 

In  1998,  the  district  paid 
$2.6  million  for  the  vendor’s 
accounting  and  human  re¬ 
sources  software  and  another 
$1.7  million  to  an  integrator 
for  the  actual  rollout.  How¬ 
ever,  budget  cutbacks  in  1999 


killed  the  project.  The  district 
still  owns  the  software,  and 
the  only  way  to  recover  its  in¬ 
vestment  is  to  try  to  install  it 
again.  But  doing  that  isn’t  nec¬ 
essarily  a  given,  Burns  said. 

“I’m  not  going  to  rule  out 
other  applications,”  he  said. 

Whatever  the  Toledo  school 
system  does,  the  plan  present¬ 
ed  to  the  superintendent  of 
schools  will  have  to  show  cost 
savings  that  justify  any  new 
expenses.  Bums  said  he  would 
also  consider  staggering  the 
implementation,  installing  one 
application  at  a  time. 

It’s  not  uncommon  for  past 
multimillion-dollar  invest¬ 
ments  to  lie  fallow,  said  Joshua 
Greenbaum,  an  analyst  at  En¬ 
terprise  Applications  Consult¬ 
ing  in  Berkeley,  Calif.  “With 
local  and  municipal  govern¬ 
ments,  there  seems  to  be  a  bad 
legacy  of  doing  this.”  ©  50400 
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Microsoft  Recants  Pledge  for  Exchange  Add-on 


Exec  retreats  from 
promise  of  2005  ship 

BY  JORIS  EVERS 

Microsoft  Corp.’s  plans  for  its  Exchange 
Server  line  have  become  even  more 
uncertain  than  they  were  earlier  this 
year  when  the  company  removed  the 
2006  “Kodiak”  release  of  the  messag¬ 
ing  software  from  its  product  road  map. 

Microsoft  officials  are  backpedaling 
on  a  May  promise  to  ship  an  addition 
to  Exchange  called  Edge  Services  in 
2005.  The  company  described  the  add¬ 
on  as  an  intelligent  message-transfer 
agent  that  offers  security,  spam  and 
virus  protection.  It  was  the  only  an¬ 
nounced  release  for  the  Exchange  line 
beyond  2004. 

“We  remain  very  committed  to  Edge 
Services,”  said  Kim  Akers,  a  senior  di¬ 
rector  in  Microsoft’s  Exchange  Server 
group.  But,  she  added,  “it  is  premature 
to  talk  about  timing.” 

Analysts  said  that  with  no  product 
road  map,  it’s  difficult  for  customers  to 
make  licensing  decisions  and  plan  up¬ 
grades.  “Microsoft  owes  it  to  its  cus¬ 
tomers  to  specify  and  deliver  more  or 
less  on  time  the  products  and  updates 
they  say  are  coming,”  said  Peter  Paw- 
lak,  an  analyst  at  Directions  on  Micro¬ 
soft  Inc.  in  Kirkland,  Wash.  The  onus  is 
on  Microsoft  to  provide  a  true  road 
map  because  its  multiyear  licensing 


contracts  include  a  maintenance  pro¬ 
gram  that  covers  software  updates, 
Pawlak  said. 

Although  Microsoft  makes  it  diffi¬ 
cult  to  anticipate  which  products  are 
in  the  pipeline,  it’s  delivering  incre¬ 
mental  updates  to  Exchange,  said 
Teney  Takahashi,  an  analyst  at  The 
Radicati  Group  Inc.  in  Palo  Alto,  Calif. 
“Microsoft  is  taking  its  time  to  develop 
these  products  right,”  he  said.  “I  think 
that  is  more  important  than  offering  a 
road  map.” 

User  Timetables 

Philip  Colmer,  IT  manager  at  ProQuest 
Information  and  Learning  Ltd.  in  Cam¬ 
bridge,  England,  said  he’s  content  with 
the  Exchange  Server  2003  system  he 
upgraded  to  at  the  beginning  of  the 
year.  “I  am  not  too  bothered  at  this 
point  that  Microsoft  has  not  made  any 
announcements,”  he  said. 

Microsoft  is  heralding  Exchange 
Server  2003  this  week  at  a  user  event 
in  Orlando.  However,  the  company 
isn’t  ready  to  publicly  discuss  a  road 
map  there,  Akers  said. 

In  a  keynote  at  the  Exchange  Con¬ 
nections  event,  Dave  Thompson,  cor¬ 
porate  vice  president  of  Microsoft’s 
Exchange  Server  products  group,  said 
the  company  has  sold  55%  more  Ex¬ 
change  Server  2003  licenses  in  its  first 
year  than  for  the  predecessor  version 
in  the  same  time  frame.  In  addition, 


Microsoft  Revises  Antispam  Plan 


BY  PAUL  ROBERTS 

After  running  into  loud  opposition  to 
its  first  Sender  ID  antispam  plan,  Mi¬ 
crosoft  Corp.  revised  it  and  resubmit¬ 
ted  it  to  the  Internet  Engineering  Task 
Force  (IETF)  last  week. 

The  new  plan  resolves  disputes  with 
Internet  service  providers  and  the 
open-source  software  community 
about  the  use  of  patent-pending  tech¬ 
nology,  said  Meng  Weng  Wong,  chief 
technology  officer  at  Pobox.com  and  a 
co-author  of  the  revised  proposal. 

The  standard  combines  two  authen¬ 
tication  standards  —  Caller  ID,  which 
Microsoft  developed,  and  Sender  Poli¬ 
cy  Framework  (SPF),  which  Meng  de¬ 
veloped.  Microsoft  submitted  a  draft  of 
Sender  ID  to  an  IETF  working  group  in 
June,  but  the  approval  process  became 
bogged  down  because  Microsoft  said 
it  held  patents  for  algorithms  used  to 
check  PRAs,  or  purported  responsible 
addresses,  and  planned  to  require  that 


users  obtain  licenses  for  Sender  ID 
[QuickLink  49427], 

The  dispute  produced  some  high- 
profile  defections  from  the  specifica¬ 
tion,  including  The  Apache  Software 
Foundation.  America  Online  Inc.  also 
opposed  Sender  ID  because  it  wasn’t 
compatible  with  early  forms  of  SPF. 
AOL  said  it  will  support  the  revised 
version  of  Sender  ID. 

Microsoft  expects  the  specification  to 
be  given  “experimental”  status  by  the 
IETF  but  doesn’t  know  if  it  will  be  tak¬ 
en  up  for  formal  approval  by  the  group, 
according  a  Microsoft  spokesman. 

Despite  the  changes,  the  new  speci¬ 
fication  still  might  not  satisfy  open- 
source  software  advocates,  who  con¬ 
tinue  to  be  concerned  about  Micro¬ 
soft’s  patent  claims  and  the  larger 
problem  of  proliferating  intellectual 
property  patents,  Meng  said.  ©  50350 

Roberts  reports  for  the  IDG  News  Service. 


the  vendor  received  more  than  175,000 
requests  to  evaluate  the  product. 

Still,  Microsoft  faces  a  challenge 
in  getting  customers  to  upgrade  Ex¬ 


change  environments.  The  Radicati 
Group  expects  that  Exchange  Server 
2003  seats  won’t  exceed  the  number  of 
Exchange  5.5  or  Exchange  2000  seats 
until  the  end  of  2005.  ©  50327 

Evers  reports  for  the  IDG  News  Service. 


IT’S  AFFORDABLE. 

IT’S  COMPACT. 

ITS  YOU. 

It’s  the  enterprise-class  IBM  TotalStorage®  DS6800  system. 
It’s  as  low  as  half  the  price'  and  takes  up  as  little  as  5% 
of  the  space2  of  that  “other”  enterprise  storage  offering 
(the  EMC  Symmetrix  DMX800).  With  Power  Architecture- 
technology  and  a  surprisingly  small  footprint,  it’s  designed 
to  deliver  lower  costs.  Is  it  storage  or  is  it  a  strategy?  It’s 
both.  It’s  IBM  TotalStorage  at  its  best. 

Find  and  learn  the  whole  story  at  ibm.com/totalstorage/save 

IBM  TotalStorage® 


'Price  comparison  based  on  U.S.  list  prices.  Actual  customer  prices  may  vary. 
Compares  IBM  TotalStorage  DS6800  system  with  2TBs  Operating  Environment 
License  software,  1.16TB  using  146GB  10K  FC  Drives.  4GB  of  memory.  19  inch  rack 
and  FICON  Attachment  license  (zSeries  support),  and  EMC  Symmetrix  DMX800  with 
2TBs  Control  Center  Management  software,  1.16TB  using  146GB  10K  FC  Drives,  and 
4GB  of  memory.  List  prices  for  EMC  Symmetrix  obtained  from  Ideas  International. 
www.ldeaslnternational.com,  as  of  10/1/04  -IBM  TotalStorage  DS6800  may  be  used 
as  a  stand-alone  unit,  or  mounted  into  a  rack.  Size  comparison  is  based  on  stand¬ 
alone  use.  IBM.  TotalStorage  and  Power  Architecture  are  trademarks  or  registered 
trademarks  of  International  Business  Machines  Corporation  in  the  United  States 
and/or  other  countries.  Other  company,  product  and  service  names  may  be 
trademarks  or  service  marks  of  others.  5)2004  IBM  Corporation  All  rights  reserved 
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ARE  YOU  READY? 


80%  of  IT  failures  are  a  result  of  poorly  managed  change. 

If  you  could  harness  these  IT  changes  and  reduce 
disruption  to  your  business,  wouldn't  you?  BMC 
Software's  Change  and  Configuration  Management  (CCM) 
solution,  an  integral  part  of  Business  Service  Management, 
delivers  an  end-to-end  lifecycle  management  approach  to 
managing  change  processes,  configuration  control  & 
information  (CMDB),  and  discovery  &  detection. 


Remedy  Change  Management,  a  key  part  of  CCM,  is  an  ITIL- 
compatible  application  that  enables  IT  to  reduce  business 
outages  and  accelerate  responsiveness  to  change.  Plus,  our 
recent  acquisition  of  Marimba  brings  the  broadest  set  of  -  .  T 

.  •  {•'  .•  '  .  -  v  *  :/ 

policy-based  configuration  management  automation  products  . 
to  our  CCM  solution.  Now,  you  can  ensure  that  wide-scale  ,  ,  ,  " 

■  •  i  i  '  •  '  ' 

change  is  implemented  smoothly,  efficiently,  and  refi.ably.  •  ’ 
Learnmoreatwww.remedy.com/ccm  .  -  ?  ,  ' 
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SAP  R/3  hosted  by  an  HP  data 
center  and  technical  staff.  “We 
only  have  one  instance  of  SAP, 
and  it’s  big,”  Perroni  said. 

Amy  Konary,  an  analyst  at 
IDC,  said  SAP  separates  itself 
from  other  hosted  application 


Hosted  SAP  Service  Targets  Midmarket 


providers  by  targeting  pack¬ 
ages  to  specific  industries. 
The  managed  offering  will 
likely  appeal  to  large  SAP 
shops  extending  the  software 
to  subsidiaries  or  regional  of¬ 
fices,  she  said.  O  50364 


BY  MARC  L.  SONOINI 

SAP  AG  is  rolling  out  a  hosted 
service  it  hopes  will  appeal  to 
midsize  customers  that  can 
buy  the  software  at  a  monthly 
fee  as  low  as  $325  per  user  per 
month  while  avoiding  much 
of  the  complexity  of  in-house 
installations. 

SAP  last  week  unveiled 
the  managed  offering,  which 
officials  said  delivers  pre¬ 
packaged  bundles  of  software 
aimed  at  specific  vertical  mar¬ 
kets,  such  as  consumer  goods 
and  high-tech  device  manufac¬ 
turers.  The  bundles  use  server 
and  storage  hardware  in  the 
data  centers  of  SAP  partner 
Hewlett-Packard  Co.  HP  will 
also  provide  security  and 
other  technical  support  and 
services. 

Previously,  SAP  primarily 
offered  hosted  applications 
only  to  very  large  companies 
with  special  requirements 
consistent  with  their  scale, 
said  Bill  McDermott,  CEO  and 
president  of  SAP  America  Inc. 

Dedicated  Servers 

Under  the  new  plan,  each  cus¬ 
tomer  gets  a  dedicated  server 
in  an  HP  data  center.  “A  lot  of 
customers  in  small  to  medi¬ 
um-sized  businesses  told  me 
they  don’t  like  the  one-to- 
many  [hosting]  model  where 
their  data  is  managed  in  an 
open  environment,”  McDer¬ 
mott  said.  “They  want  a  one- 
to-one  relationship.” 

Gary  Walden,  SAP  project 
manager  at  refiner  C&H  Sugar 
Co.,  said  that  if  a  single  month¬ 
ly  pricing  scheme  had  been 
available  a  year  ago  when  his 
company  was  negotiating  with 
SAP  for  a  hosted  service,  “we 
would  have  looked  at  it  very 
hard”  as  a  way  to  save  money. 
C&H,  in  Crockett,  Calif.,  has 
used  a  full  suite  of  hosted  SAP 
applications  since  March. 

The  C&H  hosted  systems 
contract  listed  separate  prices 
for  implementation  and  con¬ 
sulting  fees,  among  other 
things,  Walden  said.  Neverthe¬ 
less,  the  hosting  service  has 
helped  boost  C&H’s  opera¬ 
tional  efficiency  without 
requiring  extra  IT  support 


staff  around  the  clock. 

For  a  large  company  like 
Halliburton  Corp.  in  Houston, 
the  new  SAP  offering  sparks 


no  interest  at  all,  said  IT  vice 
president  Mike  Perroni.  The 
energy  and  construction  ser¬ 
vices  provider  currently  runs 
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DON  TENNANT 


DAN  GILLMOR 


In  Praise  of  Perseverance 


FOR  AS  LONG  AS  I  can  remember,  when¬ 
ever  anyone  has  asked  me  what  trait  I  ad¬ 
mire  most  in  a  person,  I’ve  been  able  to 
respond  without  having  to  ponder  the 
question.  It’s  perseverance.  The  faith, 
courage,  strength  and  will  it  takes  to  refuse  to  give 
up  even  when  the  obstacles  seem  overwhelming 
define  an  attribute  that,  more  than  any  other,  en¬ 
ables  people  to  leave  this  world  a  better  place. 


Last  week,  my  dad  lost 
his  battle  with  ALS  —  the 
disease  I’ve  mentioned 
here  before  that’s  also 
known  as  Lou  Gehrig’s 
disease  —  after  a  three- 
year  fight  that  epitomized 
what  it  means  to  perse¬ 
vere.  Through  all  the  un¬ 
speakable  physical  suffer¬ 
ing,  he  remained  emo¬ 
tionally  strong  and  char¬ 
acteristically  selfless,  and 
he  did  it  all  without  ever 
losing  his  sense  of  humor.  Enough 
people  were  inspired  by  the  example 
he  set  throughout  his  life,  and  espe¬ 
cially  during  the  past  three  years, 
for  there  to  be  no  question  that  he 
has  indeed  left  this  world  a  much 
better  place. 

He  used  to  really  enjoy  reading  my 
columns,  and  I  know  he  wouldn’t 
want  me  to  use  this  space  to  thank 
him  for  the  gift  of  his  inspiring  per¬ 
severance.  He’d  want  me  to  thank 
you  for  yours  instead. 

It  is  indeed  through  sheer  perse¬ 
verance  that  the  community  of  IT 
professionals  has  created  and  ad¬ 
vanced  the  systems  that  have 
changed  and  improved  our  lives  so 
dramatically  in  recent  years.  So 
thanks  for  that. 

Thank  you  for  not  giving  up  back 
when  it  seemed  like  the  Web  was  a 
pipe  dream  because  the  pipes  couldn’t 
deliver  the  bandwidth  cheaply 
enough  for  the  average  guy.  My  dad 
loved  what  the  Web  enabled  him 
to  do,  and  he  took  full  advantage  of 
it  until  he  could  no  longer  lift  his 
arms  to  his  keyboard  and  his  fingers 
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could  no  longer  press 
the  keys. 

Thank  you  for  not 
giving  up  when  the 
naysayers  scoffed  at  the 
notion  of  making  airline 
reservation  systems  ac¬ 
cessible  to  anyone  with 
a  computer.  After  at¬ 
tending  the  Storage  Net¬ 
working  World  event  in 
Orlando  last  week,  I  was 
on  my  way  to  a  Kronos 
user  conference  that 
was  also  being  held  there  when  I  got 
the  call  that  my  dad  was  nearing  the 
end  in  a  San  Antonio  hospital.  I 
turned  my  rental  car  around,  head¬ 
ed  straight  to  the  airport  and  made 
a  call  to  Linda  Gorgone,  Computer- 
world’  s  miracle-working  office  man¬ 
ager,  who  booked  a  flight  for  me. 


Upon  my  arrival  at  the  airport, 

I  checked  in  with  an  electronic  tick¬ 
et.  That  technology  enabled  me  to 
get  to  San  Antonio  in  time  to  thank 
my  dad  for  everything  he  has  done 
for  me,  tell  him  I  love  him  and  say 
goodbye. 

There  are  no  doubt  countless 
stories  of  perseverance  on  the  part 
of  the  IT  professionals  who  made 
all  this  technology  happen,  and 
most  will  never  be  told.  That  per¬ 
severance  will  therefore  never  be 
fully  or  properly  appreciated.  I 
want  it  known  that  I  appreciate  it 
deeply. 

Finally,  a  note  of  thanks  to  every¬ 
one  who  wrote  with  such  kind  words 
in  response  to  my  previous  refer¬ 
ences  to  ALS.  This  note  from  an  IT 
manager  in  Arizona  whose  wife  has 
ALS  was  especially  touching:  “I  have 
never  met  anyone  with  ALS  that  was 
not  a  sincerely  good  person,”  he 
wrote.  “I’ll  bet  your  dad  was  a  won¬ 
derful  man.” 

Yeah,  he  was.  And  he  was  clearly 
in  very  good  company  before  he 
died.  What’s  heartening  is  that  he’s 
in  even  better  company  now. 

©  50375 


Flawed  Vote 
Could  Give  IT 
A  Black  Eye 

IT’S  LESS  THAN  two  weeks 
before  the  2004  elections 
as  I  write  this,  and  I’m  go¬ 
ing  to  go  out  on  a  not-very- 
long  limb  with  a  prediction.  Who’s  go¬ 
ing  to  win  the  presidency  is  anyone’s 
guess,  but  it’s  a  no-brainer  to  say  ahead 
of  time  that  we’ll  look  back  on  this  as 
another  messy  election,  in  a  technolog¬ 
ical  sense. 

Many  of  the  electronic  voting  ma¬ 
chines  in  use  this  year  are  flawed. 

Some  are  simply  untrustworthy.  It’s  the 
result  of  a  screw-up  that  shouldn’t 
have  happened  in  the  first  place  and 
must  not  be  allowed  to  occur  again. 

Why  is  this  relevant  to  the  IT  com¬ 
munity?  Because  the 
crummy  voting  tech¬ 
nology  is  ultimately 
an  indictment  of  IT, 
not  just  of  the  vot¬ 
ing  machine  compa¬ 
nies  and  sloppy  (or 
worse)  bureaucrats. 

The  2000  presi¬ 
dential  election  was 
almost  a  tie.  The  nar¬ 
row  margin  brought 
to  light  a  host  of 
problems  with 
punch-card  voting 
machines,  which  de¬ 
served  the  garbage 
bins  into  which 
many  were  tossed. 

Congress  understood  that  there  was 
a  crisis  —  of  technology,  of  voter  confi¬ 
dence  and,  ultimately,  of  our  very  sys¬ 
tem  of  selecting  governments.  But  law¬ 
makers  launched  more  money  than 
brainpower  at  the  problem.  The  result 
was  the  Help  America  Vote  Act,  which 
encouraged  state  and  local  voting  offi¬ 
cials  to  spend  wildly,  and  too  quickly, 
with  not  nearly  enough  due  diligence. 

Among  the  worst  flaws  was  an  as¬ 
tonishing  omission.  There  was  no  re¬ 
quirement  that  touch-screen  voting 
machines  come  with  a  verification 
method  like  that  of  automated  teller 
machines:  a  paper  printout. 

The  voting  machine  companies,  and 
their  too-credulous  customers  in  gov¬ 
ernment,  pooh-poohed  the  matter.  One 
Florida  official  said  the  voting  totals 
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were  verifiable  because,  well,  you 
could  just  ask  the  machine  to  repeat 
what  it  had  told  you.  Good  grief. 

Voting  activists  might  have  been  less 
worried  had  they  and  many  concerned 
computer  scientists  not  uncovered  a 
host  of  problems  with  the  software  in 
several  of  the  most  widely  sold  ma¬ 
chines  —  including  security  flaws  that 
tech  professionals  found  almost  literal¬ 
ly  beyond  belief.  But  despite  the  ongo¬ 
ing  whacks  to  their  credibility,  the  ma¬ 
chine  manufacturers  have  continued  to 
insist  that  all  is  well. 

What  has  made  the  situation  worse 
yet  is  their  black-box  approach.  They 
insist  that  the  source  code  is  propri¬ 
etary,  and  unless  forced  by  law,  they 
won’t  even  show  it  to  government  offi¬ 
cials.  One  e-voting  system  vendor, 
Diebold,  went  so  far  as  to  launch  legal 
threats  against  some  students  who  post¬ 
ed  internal  memos  on  the  Web  that  the 
company  found  embarrassing;  thankful¬ 
ly,  a  federal  judge  ruled  against  Diebold. 

Only  one  state,  Nevada,  required  a 
voter-verifiable  paper  trail  this  year. 
California  will  require  one  in  2006,  and 
some  other  states  are  also  moving  to¬ 
ward  such  measures. 

But  a  better  answer  is  to  bite  the 
bullet,  write  off  the  billion-dollar-plus 
investment  to  date  —  and  start  over. 
We  need  open-source  voting  software 
and  much  better  controls  over  the 
companies  selling  the  machines. 

I’d  like  to  see  IT  people  become  more 
active  in  the  voting  system.  They  could 
be  poll  watchers  in  the  near  term,  but 
in  the  long  run,  they  should  take  the 
lead  in  fixing  a  badly  flawed  system. 

There’s  not  much  at  stake  here  — 
just  democracy.  ©  50248 


MICHAEL  H.  HUGOS 

‘Hi,  I’m  From 
IT  and  I’m 
Here  to  Help’ 

MY  company  has  a 
hard  time  maintain¬ 
ing  its  profit  margins. 
Customers  can  buy  what  we 

sell  (stuff  like  paper  cups,  plastic 
spoons,  paper  towels,  mops  and  floor 
wax)  from  lots  of  other  companies. 

The  prices  we  can  charge  are  always 
being  driven  down. 

So  how  do  we  avoid  having  our  prof¬ 
its  squeezed  to  nothing?  IT  helps.  We 


start  when  one  of  us  walks 
into  a  business  meeting  and 
says,  “Hi,  I’m  from  IT,  and 
I’m  here  to  help.”  The  busi¬ 
ness  people  in  my  company 
are  glad  to  hear  this  because 
my  IT  staffers  are  becoming 
masters  of  the  80%  solution: 

We  identify  the  repetitious 
things  the  business  people 
do.  As  the  company  grows, 
such  routine  work  (typically 
70%  to  90%  of  what  they  do) 
is  overwhelming  these 
users.  The  IT  group  is  learn¬ 
ing  to  design  and  quickly 
roll  out  simple  systems  that 
automate  this  routine  work. 

These  systems  are  cheap 
and  quick  to  build  because 
we  never  try  to  automate 
anything  that  isn’t  routine. 

I  see  this  as  a  major  paradigm  shift. 
For  the  past  30  years  or  more,  people 
in  IT  have  dreaded  questions  like, 
“Yes,  but  what  about  this?”  or,  “Can 
your  system  handle  that?”  Those  com¬ 
ments  always  focus  on  exceptions  to 
the  general  rules  that  a  system  is  built 
to  handle.  Often,  they  have  the  power 
to  stop  new  systems  dead.  They  cause 
IT  people  to  add  complexity  and  ex¬ 


pense  to  otherwise  simple 
systems  in  order  to  handle 
exceptions  that  happen 
only  once  in  a  while. 

In  the  past,  such  com¬ 
ments  were  often  voiced  by 
people  who  didn’t  want 
computers  anyway  and  who 
were  motivated  to  come  up 
with  ways  to  delay  or  stop 
a  rollout  of  new  systems. 
Times  have  changed.  Older 
people  have  gotten  used  to 
computers,  and  younger 
people  can’t  imagine  living 
without  them.  And  every¬ 
one’s  workload  has  doubled 
or  tripled. 

There’s  no  longer  a  need 
to  build  complex  systems 
to  appease  obstructionists, 
because  there  aren’t  many 
of  them  left.  And  since  workflows 
change  quickly  and  the  most  complex 
workflows  change  the  fastest,  why 
spend  a  lot  of  time  automating  them? 
Instead,  learn  to  see  complexity  as 
combinations  of  simple,  repetitive 
tasks  and  automate  the  simplest  and 
most  repetitive  of  them. 

Figuratively  speaking,  people  in  my 
company  are  often  too  busy  mopping 


to  fix  the  leak.  So  we  in  IT  build  cheap, 
simple  systems  to  do  the  mopping  and 
free  people  up  to  figure  out  why  the 
leak  is  happening  and  how  best  to  fix 
it.  Once  freed  from  the  burden  of  rou¬ 
tine  tasks,  they  have  time  to  do  root- 
cause  analysis  and  fix  problems  at  the 
source.  They  also  have  time  to  be  more 
responsive  to  unique  customer  needs. 
If  we  serve  those  customers  well, 
they’ll  do  business  with  us  again. 

The  company  wins  in  two  ways. 

First,  there  are  increased  operating 
efficiencies  and  cost  savings  that  come 
from  eliminating  recurring  problems. 
Then  there  are  the  benefits  of  attract¬ 
ing  and  retaining  customers  with 
unique  needs  —  and  such  customers 
are  often  the  most  profitable  ones. 
These  wins  happen  because  simple, 
stable  and  scalable  systems  hum  away 
in  the  background,  handling  more  and 
more  of  the  routine  transactions.  That 
frees  up  people  to  focus  on  the  nonrou¬ 
tine  and  to  find  the  profit  opportunities 
that  are  hidden  there.  This  is  how  IT 
helps  my  company  thrive.  ©  49717 
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Programmers  Can  Learn  From  Mechanics 


I  AGREE  WITH  DON  TENNANT'S 

final  comment  in  his  “Handi¬ 
capped  Thinking”  column  [Quick- 
Link  49904]  about  the  e-mail  from 
a  Linux  supporter  regarding  auto 
mechanics.  It  does  auto  mechanics 
a  great  disservice  to  assume  that  a 
failed  programmer  could  be  a  suc¬ 
cessful  mechanic.  A  programmer 
can  take  a  trial-and-error  approach 
to  solving  a  programming  problem, 
but  doing  the  same  to  solve  a  prob¬ 
lem  in  an  auto  is  far  more  costly. 

The  mechanic  who  misdiagnoses 
a  clunking  sound  and  replaces  a 
transmission  when  a  bad  universal 
joint  was  making  the  noise  will  soon 
be  looking  for  a  new  job.  He  might 
make  it  as  a  programmer  if  the 
u-joint  was  the  second  thing  on 
his  list  of  possible  problems. 

Morris  Campbell 
Systems  manager,  Norfolk 
Department  of  Human 
Services,  Norfolk,  Va., 
Morris.campbell@norfolk.gov 

ITS  A  SHAME  society  underval¬ 
ues,  and  often  disrespects,  the 


excellent  tradesmen,  craftsmen  and 
others  who  may  have  been  trained 
on  the  job.  I  had  a  two  uncles  who 
worked  from  grade  school  to  an  old 
age.  One  had  a  third-grade  educa¬ 
tion,  and  at  one  time  he  may  have 
been  the  best  mechanic  in  St.  Louis. 
The  other  completed  some  college. 
He  was  an  excellent  small  contrac¬ 
tor  and  factory  mechanic,  and  his 
business  skills  made  a  lot  of  money 
for  his  employer.  What  a  shame  our 
society  doesn’t  value  skill  and  sub¬ 
stance  over  the  paper  freely  passed 
out  at  our  schools. 

Jerry  W.  Hubbard 
Communication  service 
supervisor,  St.  Louis 

DON  TENNANT  seems  to  misun¬ 
derstand  the  comment,  “Heck, 
if  I  had  cranked  out  this  kinda  crap 
when  I  was  a  junior  programmer,  I'd 
be  an  auto  mechanic  now.”  It  seems 
obvious  to  me  that  this  simply 
means  that  people  who  don’t  write 
quality  software  could  perhaps  find 
another  field  in  which  they  could 
produce  a  higher-quality  product.  I 


don’t  find  it  disparaging  to  auto  me¬ 
chanics  at  all.  It’s  just  an  assertion 
that  many  Microsoft  engineers 
would  be  better  served  to  find  an¬ 
other  line  of  work. 

I  personally  don’t  blame  the  engi¬ 
neers  for  low-quality  Microsoft  soft¬ 
ware,  however.  I  blame  the  culture 
and  processes  of  the  company  as  a 
whole,  just  as  Bill  Gates  did  in  his 
e-mail  missive  on  trustworthy  com¬ 
puting  a  few  years  ago. 

Greg  Bledsoe 
Senior  network  analyst, 
Columbus,  Ga. 


Job  Hunt  Peeves 

SINCE  GETTING  DOWNSIZED 

from  a  Big  Five  consulting  firm 
two  years  ago,  I  have  been  on  nu¬ 
merous  interviews  and  have  a  few 
pet  peeves  of  my  own  [“Hiring  Hor¬ 
rors,"  QuickLink  49558].  The  big¬ 
gest  is  being  asked  to  walk  the  hir¬ 
ing  manager  through  my  r6sum6. 
This  translates  as,  “I  didn’t  have 
time  to  read  your  r6sum6,  so  I  have 
no  idea  who  you  are  or  what  you've 
done.”  I’ve  spent  hours  researching 
the  prospective  employer.  I  am  fully 


prepared  to  talk  about  what  I  can  do, 
but  I  never  get  a  chance  to  do  so. 
Other  peeves  are  interviews  with 
everybody  I  could  possibly  come  in 
contact  with,  even  after  the  manager 
realizes  the  job  isn’t  a  good  fit,  and 
insulting  salary  offers.  When  I  was  a 
hiring  manager,  the  goal  was  to  get 
the  best  person  for  the  job  at  fair 
market  value.  Hiring  an  employee 
was  perceived  as  making  an  invest¬ 
ment,  not  bargain-basement  shop¬ 
ping.  It’s  an  old  maxim  but  true  - 
you  get  what  you  pay  for. 

Fiona  M.  Lamb 
Denver 
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We  radically  changed  color  in  the  office. 
And  with  it,  your  perspective  on  the  day. 


Nothing  helps  you  improve  your  perspective 
on  the  day  quite  like  the  ability  to  do  things 
a  little  better,  a  little  faster,  and  a  little  more 
beautifully.  That’s  why  Canon  has  added  a 
new  addition  to  our  imageRUNNER®  line.  With 
the  new  Color  imageRUNNER  C3220  and 
imageWARE  Publishing  Manager  Software,  you 
can  create,  publish  and  print  professional-quality 
color  booklets,  brochures  and  manuals.  You  can 
even  scan  and  e-mail  color  documents.  All  in  house, 
and  all  from  the  comfort  of  your  desktop.  And  with 
the  Color  imageRUNNER  C3220,  productivity 


increases  while  color  stays  fast  and  affordable.' 
How’s  that  for  working  the  way  you  need  to? 
www.imagerunner.com  1-80O-OK-CANON 


GAIN  ADAPTABILITY.  Can  your  network  carry  both  voice  and  data  throughout  the  world?  Can  it  ease  you  into  IP  telephony 
at  your  own  pace,  while  still  giving  you  the  reliability  and  security  you  expect?  Can  it  deliver  new  business  applications 
that  provide  greater  return  on  investment  than  you  may  have  thought  possible?  AT&T  has  the  networking  expertise 
to  deliver  VoIP  services  and  applications  that  interoperate  with  the  industry’s  leading  VoIP  equipment  providers. 
Plus,  the  capacity  to  carry  all  your  applications  forward-no  matter  how  heavy  the  load.  CAN  YOUR  NETWORK  DO  THIS? 


AT&T 

The  world's  networking  company5” 


For  a  network  that  can,  call  1-888-889-0234 

att.com/networking 
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QUICKSTUDY 

Error  Checking  and  Correction 

Error  checking  and  correction  is  the  process  of  de¬ 
tecting  errors  during  the  transmission  or  storage 
of  digital  data  and  correcting  them  automatically. 
This  usually  involves  sending  or  storing  extra  bits 
of  data  according  to  specified  algorithms.  Page  30 


SECURITY  MANAGER’S  JOURNAL 

Lack  of  Control 
Becomes  Nightmare 

Not  having  complete  control  of  network 
security  operations  is  a  nightmare  for  C.J. 
Kelly,  and  now  she  has  to  find  out  what’s 
really  going  on  in  the  network.  Page  32 


OPINION 

Make  Vendors  Pay 
For  Security  Flaws 

Bruce  Schneier  says  that  the  ultimate 
answer  to  security  vulnerabilities  is  to 
make  software  vendors  liable  for  the 
holes  in  their  products.  Page  34 


Take  a  stroll  through  almost  any  data 

center  today,  and  you  will  see  pretty  much 
what  you  would  have  seen  a  decade  ago  — 
square  white  tiles  over  a  raised  floor, 
bright  florescent  lights,  little  red  fire 
alarms  everywhere  and  rows  of  faintly 
humming  computer  equipment  and  air 
conditioning  gear. 

But  this  familiar  scene  masks  some  big  changes  in 
the  way  that  data  centers  are  built,  as  well  as  changes 
in  computer  technology  and  an  evolution  in  what 
data  centers  are  expected  to  accomplish.  Ultradense 
server  racks,  the  move  to  distributed  and  virtual  proc¬ 
essing,  a  requirement  for  instant  fail-over,  and  new 
requirements  for  IP  telephony  and  voice  over  IP  are 
all  driving  changes  above  and  below  the  raised  floor. 

Keeping  Cool 

Perhaps  the  greatest  challenge  in  data  centers  today 
is  how  to  keep  those  rooms  —  and  the  components 
within  them  —  cool.  Facility  designers  used  to  apply 
a  simple  rule  of  thumb:  If  the  room  was  going  to  be  x 
thousand  square  feet,  it  would  need  y  tons  of  air  con¬ 
ditioning.  Or  designers  relied  on  equipment  “name¬ 
plates”  that  listed  peak  power  usage  based  not  on 
cooling  requirements  but  on 
safety  requirements. 

Those  simple  approaches 
don’t  work  well  today.  They’re 
likely  to  result  in  expensive 
overcooling  of  the  overall  facil¬ 
ity,  even  as  temperatures  in 
small  areas  —  such  as  inside  a 
rack  of  blade  servers  —  soar. 

Ron  Hughes,  president  of 
California  Data  Center  Design 
Group,  says  the  typical  data 
center  last  year  consumed  40 
watts  of  power  per  square  foot 
and  used  server  racks  that  con¬ 
sumed  2  kilowatts  each.  This 
year,  he’s  designing  a  facility 
that  will  average  120  watts  per  square  foot  and 
support  racks  that  use  4  to  5  kilowatts. 

“And  if  you  look  at  the  latest  projections  from  HP 
Sun,  IBM,  Dell  and  so  on,  they  are  predicting  thar 
racks  will  be  15  to  25  kilowatts  for  blade  servers,  ’ 
Hughes  says.  “The  overall  direction  is  toward  small 
er  footprints,  increased  capacity,  increased  power 
and  cooling  requirements.  I’ve  seen  projections  for 
blade  servers  as  high  as  30  kilowatts  per  rack,  and 
that’s  well  over  500  watts  per  square  foot.” 

The  issue  at  those  levels  isn’t  cooling  per  se,  out 

Continued  on  page  26 


Four  Trends 
Driving  New  Oata 
Center  Designs 


Need  to  support  ultra- 
dense  server  racks 


-I  Needtosui 
I  dense  serv 

n  Move  tow; 

L.  and  virtual 


Move  toward  distributed 
and  virtual  processing 

Requirement  for  instant 
fail-over 


4Miorat!on  to  IP  telephony 

i 


*f  and  voice  o  ver  IP 


By  Gary  H.  Anthes 
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Continued  from  page  23 
affordable  cooling.  Hughes  says  that  at 
40  watts  per  square  foot,  it  costs  $400 
per  square  foot  to  build  a  data  center, 
or  $20  million  for  a  50,000-square-foot 
facility.  But  at  500  watts  per  square 
foot  —  which  Hughes  says  we  could 
see  by  2009,  well  within  the  lifetime  of 
any  data  center  built  today  —  the 
amount  of  air  conditioning,  uninter¬ 
ruptible  power  supply  (UPS)  units, 
power  generators  and  related  gear 
jumps  dramatically.  Construction  costs 
soar  to  $5,000  per  square  foot,  and  the 
same  data  center  busts  the  budget 
at  $250  million,  he  says. 

The  cooling  challenge  is  compound¬ 
ed  when  a  data  center  switches  to 
emergency  backup  power.  UPS  units 
kick  in  instantly  in  a  power  failure,  so 
there  is  no  interruption  in  the  flow  of 
electricity  to  computers.  But  there  is 
often  a  delay  of  15  to  60  seconds  for 
generators  to  restart  the  cooling  units. 
That  hasn’t  been  a  problem  in  the  past, 
but  for  some  newer  equipment,  tem¬ 
peratures  can  rise  fast. 

The  temperature  in  a  data  center 
that  averages  40  watts  per  square  foot 
will  rise  25  degrees  in  10  minutes  with 
cooling  shut  off,  says  Bob  Sullivan,  a 
senior  consultant  at  The  Uptime  Insti¬ 
tute  Inc.  in  Santa  Fe,  N.M.  But  in  places 
where  power  consumption  is  300  watts 
per  square  foot,  the  temperature  can 
rise  that  much  in  less  than  a  minute. 

The  solution,  Sullivan  says,  will  be 
uninterruptible  cooling  that  works  the 
same  way  as  uninterruptible  power. 
That  would  involve  putting  air  fans, 
and  possibly  systems  that  pump 
chilled  water,  on  a  UPS,  he  says. 

Distributing  the  Data  Center 

Many  companies  today  have  just  one 
big  data  center,  or  maybe  two  or  more 
depending  on  the  locations  of  users. 
But  an  abundance  of  cheap  “dark” 
fiber,  plus  new  virtualization  software, 
is  enabling  a  much  more  flexible,  dy¬ 
namic  and  user-transparent  distribu¬ 
tion  of  processing  workloads. 

For  example,  the  Federal  National 
Mortgage  Association  has  two  data 
centers,  including  one  designed  to  be 
mostly  a  contingency  site.  Fannie  Mae 
is  building  another  data  center  to 
replace  the  contingency  center  and 
will  then  evolve  both  centers  to  a  “co¬ 
production  environment,”  says  Stan 
Lofton,  director  of  Wintel  systems 
at  the  Washington-based  mortgage 
financing  company. 

“We  have  a  few  applications  today 
that  we  consider  dual-site  production, 
in  operation  all  the  time,  so  if  we  lost 
one  site,  it  would  be  seamless  to  the 
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user,”  he  says.  “Over  time,  we  see  more 
and  more  applications  going  that  way.” 

That  approach  helps  avoid  single 
points  of  failure  and  makes  disaster  re¬ 
covery  faster  and  easier,  says  Joshua 
Aaron,  president  of  Business  Technol¬ 
ogy  Partners  Inc.  in  New  York.  “And 
not  having  to  consolidate  all  your  real 
estate  in  one  location  allows  you  to  ne¬ 
gotiate  better  deals  in  off-the-beaten- 
path  areas.” 

That  approach  is  leading  some  com¬ 
panies  to  bring  disaster  recovery  in- 
house,  rather  than  using  a  service 
from  another  company,  Sullivan  says. 
“You’re  seeing  those  disaster  recovery 
facilities  used  also  for  development, 
testing  and  co-production,”  he  says. 

Co-production  data  centers  carry 
with  them  the  requirement  of  “contin¬ 
uous  availability,”  says  Terry  Rodgers, 
a  facilities  manager  at  Fannie  Mae.  In¬ 
creasingly,  users  are  saying  they  can’t 
wait  a  few  hours  or  even  a  few  minutes 
to  bring  up  their  systems  at  a  backup 
site  if  the  main  site  is  knocked  out  by  a 
fire  or  some  other  disaster.  Fail-over 
has  to  be  instantaneous,  and  that’s 
both  a  software  and  a  hardware  issue, 
Rodgers  notes. 


Redundancy  Times  Two 

Continuous  availability  requires  a  Tier 
IV  data  center,  as  defined  by  The  Up¬ 
time  Institute.  Tier  IV  requires  two  in¬ 
dependent  electrical  systems,  all  the 
way  down  to  dual  power  cables  into 
the  computer  hardware.  Fannie  Mae’s 
new  data  center  will  be  built  to  Tier  IV 
specs  and  will  offer  “real-time  back¬ 
up,”  Rodgers  says. 

Visa  U.S.A.  Inc.  has  two  50,000- 
square-foot-plus  data  centers  in  the 
U.S.,  one  on  each  coast.  Either  can  in¬ 
stantly  back  up  the  other.  Each  center 
is  rated  as  N+l,  which  means  that  every 
system  with  n  components  has  at  least 
one  hot  spare.  For  example,  if  a  data 
center  has  six  UPS  modules  in  use, 
there  will  be  a  seventh  standing  by 
under  the  N+l  principle. 


Within  a  year,  Visa  will  migrate  to 
a  2(N+1)  architecture,  in  which  every 
system  is  completely  duplicated.  In  the 
above  example,  the  data  center  would 
have  two  active  UPS  systems,  each 
with  separate  cables  to  the  equipment 
and  each  with  N+l  redundancy. 

“Ten  years  ago,  N+l  allowed  for  a 
component  failure,”  says  Richard 
Knight,  senior  vice  president  for  oper¬ 
ations  at  Foster  City,  Calif.-based  Visa. 
“Now,  with  technology  changes  and 
everything  dual-powered,  the  ultimate 
design  is  2(N+1).  It’s  dual  systems  ver¬ 
sus  dual  components.” 

In  addition  to  offering  the  highest 
levels  of  fault  tolerance,  2(N+1)  will 
enhance  flexibility  because  an  entire 
system  can  be  taken  down  for  mainte¬ 
nance,  says  Jerry  Corbin,  Visa’s  vice 
president  for  central  facilities.  But,  he 
says,  “it  also  tremendously  increases 
the  complexity  to  be  managed.” 

Communications  Buildup 

Networking  issues  are  also  changing 
data  center  designs,  and  storage-area 
networks  pose  special  challenges, 
Aaron  says.  “SANs  typically  attach 
to  Fibre  Channel  switches,  although 
IP  SCSI  is  making  inroads  in  the  mar¬ 
ket,”  he  says.  “Today’s  Fibre  Channel 
switches  require  their  own  infra¬ 
structure  and  must  be  planned  for  dur¬ 
ing  data  center  design.  They  take  rack 
space  and  consume  a  lot  of  power.” 

Indeed,  communications  considera¬ 
tions  will  increasingly  influence  data 
center  design,  Aaron  predicts.  “With 
the  proliferation  of  voice  over  IP,  the 
data  center  now  has  to  support  a  very 
mission-critical  application:  voice,”  he 
says.  “How  do  you  provide  power  to 


the  IP  phones?  How  do  you  handle  911 
service?  How  do  you  provide  voice 
mail?  How  do  you  or  will  you  support 
unified  messaging?” 

Power-failure  relays  to  support  911 
service  haven’t  traditionally  been  part 
of  a  data  center  design,  but  they  will 
be,  Aaron  says,  as  will  backup  power 
gear  for  voice  gateways,  media  gate¬ 
ways  and  IP  phones. 

Unified  Management 

IP  networks  bring  relief  as  well  as  chal¬ 
lenges.  Data  centers  are  starting  to  con¬ 
nect  environmental  monitoring  sensors 
to  the  data  network  so  both  facilities 
managers  and  IT  managers  have  a  uni¬ 
fied  view  of  the  health  of  all  systems. 

Facilities  equipment  manufacturers 
use  common  data-exchange  standards 
and  network  protocols  to  help  bridge 
the  facilities  and  IT  worlds.  For  exam¬ 
ple,  NetBotz  Inc.  in  Austin  sells  IP- 
addressable  wireless  “monitoring  ap¬ 
pliances”  that  can  be  fitted  with  secu¬ 
rity  cameras,  microphones  and  sensors 
for  humidity,  temperature  and  airflow. 
They  can  be  read  remotely  or  send 
alerts  by  e-mail. 

“The  cost,  size  and  complexity  of 
these  kinds  of  things  has  come  down,” 
Aaron  says.  “Plus,  they  are  now  inte¬ 
grated  with  the  network  so  you  can  see 
them  across  the  WAN  in  a  remote  lo¬ 
cation.”  049777 _ 

MORE  ABOUT  DATA  CENT®  til 

Visa  extends  monitoring:  The  company  is  moving 
toward  end-to-end  service-level  monitoring  in  the  data 
center  -  and  beyond.  QuickLink  49773 

Cool  tools:  Here  are  four  ways  engineers  are  dealing 
with  balancing  data  center  heat  loads: 

QuickLink  49775 
www.computerworld.com 


HP’s  Experiment  in  Cool 


ADVANCED  TECHNOLOGY  intended  to  gram  that  dynamically  models  the  data 
cool  data  centers  in  just  the  right  spots  is  center  based  on  preset  policies  and  ttte 
under  development  at  Hewlett-Packard  principles  of  thermodynamics. 

Co.  “The  old  approach  was  to  keep  the  The  system  uses  the  results  of  the 

room  at  a  constant  temperature,  much  modeling  to  direct  vents  and  blowers  so 
like  an  auditorium  ”  says  Chandrakant  that  cool  air  is  sent  just  where  it's  nsed- 
Patel,  distinguished  technologist  at  HP  ed.  The  control  software  can  also  redis- 
Laboratories.  “But  now  data  centers  are  tribute  processing  workloads  within  the 
starting  to  look  like  Carnegie  Hall,  with  data  center  or  across  a  network  of  data 

100  people  per  seat”  centers.  HP  says  smart  cooling  will  re¬ 

in  an  approach  that  HP  calls  “smart  duce  energy  costs  for  cooling  by  25%. 
cooling  ”  there  are  temperature  sensors  HP  currently  offers  professional  data 
everywhere  in  the  data  center,  including  center  design  services,  and  it  plans  to  sell 

six  to  eight  in  each  server  rack.  HP  even  the  hardware  components  for  smart  cool- 
has  robots  with  sensors  on  them  that  ing  systems  when  it  establishes  partner- 
travei  about,  looking  for  unanticipated  hot  ships  with  vendors  of  the  hardware, 
spots.  The  sensors  send  data  over  the  according  to  Patel, 
network  to  an  analysis  and  control  pro-  -  Gary  H.  Anthes 


YOU’VE  BEEN  WAITING 
FOR  THE  NEXT  GENERATION  OF  NETWORKING 
AND  ALL  THIS  TIME,  IT’S  BEEN  RIGHT  THERE  WAITING  FOR  YOU 

Within  your  notebooks,  PDAs  and  networking  gear  are  chips  that  enable  you  to  more  securely  unleash  the  full  power  of  high-speed 
wireless  networking.  When  Dell,®  HP,®  palmOne®  and  Sony  Ericsson®  are  looking  for  the  best  performance,  they  turn  to  Broadcom.® 
In  fact,  our  54g™  wireless  LAN  chips  are  available  in  over  95%  of  major  notebook  brands  offered  with  802.1  Ig.1  And  with  Broadcom 
you  can  expect  interoperability  among  802.1  la/b/g  networks  and  powerful  security  for  your  wireless  LAN,  with  CCX,  WPA  and  AES 
technologies  built  in.  Whether  you’re  on  a  wireless  PAN,  LAN  or  WAN,  Broadcom  solutions  ensure  the  devices  you  use  today— and 
those  you  add  tomorrow— will  connect  reliably,  seamlessly  and  securely. 


Learn  how  you  can  prepare  your  network  for  the  convergence 
of  voice,  data  and  video.  Find  out  more  on  Nov.  1 7  in  our 
webcast  “Voice  and  Data  on  Enterprise  Wi-Fi  Networks.” 
Register  today  at  www.gobroadcom.com/wireless 


B*oadcom  •  the  pulse  logo,  Connecting  everything  •  the  Connecting 
everything  logo  end  54g  ‘  are  trademartcs  of  Broadcom  Corporation  and/or 


1  NPD  Group,  July-August,  2003.  U  S.  retail  shipments 
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Open  VMS 
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SURVIVES©THRIVES 


The  ‘legacy’  operating  system  maintains  asubstantial  base  in  large  organizations, 

and  there’s  promise  of  new  interest  as  it  moves  to  64-bit  Itanium.  By  Drew  Robb 

. 
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Open  VMS  was  supposed 

to  have  died  a  slow  and  unheralded 
death  sometime  during  the  1990s. 
Labeled  passe  by  analysts  and  “legacy” 
by  Windows  and  Unix  enthusiasts  in 
the  wake  of  the  distributed  computing 
boom  of  the  ’90s,  it  hardly  merits  a 
mention  in  the  computer  press.  Yet  the 
operating  system  has  stubbornly  re¬ 
fused  to  go  away. 

Digital  Equipment  Corp.  developed 
the  Virtual  Memory  System  in  1977  for 
VAX  hardware  as  a  multiuser,  multi¬ 
tasking  operating  system.  (Digital  was 
eventually  absorbed  by  Compaq  Com¬ 
puter  Corp.,  which  merged  with 
Hewlett-Packard  Co.  in  2001.)  Open- 
VMS  is  a  later  version  that  runs  on 
VAX  and  Alpha  and  will  soon  be  avail¬ 
able  on  HP  Integrity  servers,  part  of 
the  company’s  64-bit  Itanium  line. 

One  of  the  perceived  drawbacks 
contributing  to  the  aura  of  doom 
around  OpenVMS  was  the  operating 
system’s  tie  to  expensive  proprietary 
hardware  —  first  VAX,  then  Alpha.  But 
now  that  Integrity  servers  —  which 
also  support  HP-UX,  Linux  and  Win¬ 
dows  —  run  OpenVMS,  its  users  will 
benefit  from  the  same  manufacturing 
economies  of  scale  that  users  of  those 
other  operating  systems  do. 

Even  now,  however,  annual  Open- 
VMS-related  hardware,  software  and 
services  earn  in  excess  of  $2  billion  an¬ 
nually  for  HP,  and  more  than  400,000 
VMS  systems  are  still  operating  world¬ 
wide,  according  to  a  source  at  the  com¬ 
pany.  Those  numbers  are  backed  up  by 
Ken  Farmer  at  OpenVMS.org,  an  inde¬ 
pendent  Web  site  dedicated  to  Open¬ 
VMS  users.  He  estimates  that  there  are 
10  million  users  worldwide  and  hun¬ 
dreds  of  thousands  of  installations  of 
OpenVMS. 

“There  were  about  456,000  VMS 
systems  almost  a  decade  ago,  and  after 


a  slight  yearly  decline  for  a  few  years, 
the  operating  system  is  now  staging  a 
revival,”  says  high-performance  com¬ 
puting  guru  Terry  Shannon,  a  22-year 
VMS  veteran  in  Amarillo,  Texas,  who 
wrote  the  original  VMS  user  guide. 
“Some  of  the  folks  who  drank  the  Win¬ 
dows  Kool-Aid  and  dumped  VMS  for 
Windows  are  now  coming  back.” 

When  the  Chips  Are  Down 

OpenVMS/Alpha  systems  are  com¬ 
monly  used  by  financial  services, 
health  care,  manufacturing  and  aero¬ 
space  companies,  as  well  as  utilities 
and  state  lotteries  and  other  govern¬ 
ment  agencies.  HP  says  that  50%  of 
major  telecommunications  providers 
and  80%  of  chip  manufacturers  use 
OpenVMS.  Users  say  that  they’ve 
stuck  with  OpenVMS  because  the  op¬ 
erating  system  has  provided  all  of  the 
features  they’ve  needed,  along  with 
tested  stability. 

“We  chose  VMS  due  to  reliability, 
availability,  solid  performance,  the  fact 
that  it’s  mature  and  proven,  and  the 
stability  of  both  the  hardware  and  soft¬ 
ware,”  says  Joseph  Stenz,  senior  sys¬ 
tems  programmer/administrator  at 


Our  intention  | 
is  to  keep  on  | 
using  VMS  until 
doomsday,  as  long 
as  it  keeps  inno¬ 
vating  and  provid¬ 
ing  the  highest 
standards  in  the 
IT  world. 

DANIEL  SANCHEZ  REINA, 

IT  MANAGER.  SONY  CORP.'S 
BARCELONA  CENTER  FOR 
DISTRIBUTION 


Albert  Einstein  Healthcare  Network  in 
Philadelphia.  “There  were  some  IBM 
mainframe  and  Windows  solutions  of¬ 
fered,  but  they  didn’t  justify  moving  off 
of  Alpha.” 

Einstein  Healthcare  will  be  installing 
a  new  AlphaServer  ES47  this  fall.  It  will 
be  the  third  VMS/Alpha  system  within 
the  6,000-employee  campus  encom¬ 
passing  six  major  facilities.  Einstein 
Healthcare  also  has  over  100  Windows 
NT/2000  servers  in  an  enterprise 
LAN/WAN  (frame  relay/Asynchro- 
nous  Transfer  Mode)  environment. 

Einstein  Healthcare’s  Alpha-based 
systems  include  an  ES47  Model  2 
OpenVMS  machine  with  two  1-GHz 
Alpha  EV7  processors  with  1.75MB 
Level  2  cache  (four-processor  capable) 
and  4GB  of  error  checking  and  cor¬ 
recting  memory.  There’s  also  an  HP 
AlphaServer  ES47  Model  2  OpenVMS 
enterprise  server  with  a  memory  ex¬ 
pansion  up  to  8GB,  and  an  HP  Alpha¬ 
Server  ES47  Model  2  OpenVMS  enter¬ 
prise  server  with  memory  expansion 
up  to  8GB  and  optional  RAID  memory 
support. 

Einstein  hasn’t  clustered  its  Alpha 
environment,  which  also  includes  two 


MANY  ORGANIZATIONS  USING  VMS  have  a 
mix  of  Alpha  as  well  as  aging  VAX  hardware 
to  deal  with.  So,  with  HP  porting.  VMS  to  Ita¬ 
nium  2  for  its  Integrity  server  line,  compa¬ 
nies  must  decide  which  way  to  go.  Soldier 
on  with  VAX  despite  the  lack  of  reseller  sup¬ 
port  and  a  diminishing  pool  of  spare  parts,  or 
port  to  Alpha?  Retain  Alpha  systems  for  th 
seven  remaining  years  HP  promises  to  sup¬ 
port  them  (HP  says  it  will  likely  support  Al¬ 
pha  until  at  least  2011),  and  then  see  where 
to  go  from  there?  Or  move  everything  to  Ita¬ 


nium  and  scrap  a  significant  investment  in 
VAX/Alpha-based  VMS  systems?  Here  are  a 
few  rules  of  thumb  for  the  various  scenarios.. 

Stay  with  VAX  if  you’re  constrained  by 
hardware  or  software  issues  such  as  lost 
source  code,  special  1/0  hardware  or  large 
amounts  of  handcrafted  assembler  code, 

“Consider  emulation  of  VAX  -  prefer¬ 
ably  on  an  Alpha/VMS  platform,  not  Win" 
dows  -  if  the  performance  characteristics 
and  availability  requirements  of  the  appli¬ 
cation  allow  you  to,”  says  Colin  Butcher. 


a  systems  architect  at  XDelta. 

Move  from  VAX  to  Itanium  for  “gener¬ 
al  purp  se”  applications  withe  t  hard¬ 
ware  constraints,  but  don’t  rush  it.  Spend 
time  testing  carefully,  especially  in  high- 
availability  and  business-critical  environ¬ 
ments.  But  if  you’re  moving  to  Itanium,  then 
port  from  VAX  to  Alpha  first  in  order  to  de¬ 
bug  any  32-/64-bit  problems  and  get  the 
code  through  the  compilers. 

If  your  Alpha  machines  have  room  for 
growth  in  terms  of  performance  (for 
adding  CPUs  or  memory),  then  staying  with 
them  wi  lie  yOu  Si 

planning  and  testing  your  port  makes  sense. 
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HP  MSA1000  Fibre  Channel  storage 
arrays. 

The  ES47  supports  several  applica¬ 
tions  that  demand  reliability  and  high 
availability:  Siemens  Document  Imag¬ 
ing  23.4  for  billing  purposes;  IDXtend 
9.0  for  physician  billing  and  scheduling; 
and  McKesson/HBOC  Trendstar  for 
decision  support  and  cost  accounting. 

Einstein  Healthcare  isn’t  the  only 
user  gravitating  toward  Alpha.  Annual 
sales  of  Alpha  hardware  add  up  to  sev¬ 
eral  hundred  million  dollars,  according 
to  HP. 

Rising  to  the  Challenge 

A  major  impetus  behind  the  VMS/ 
Alpha  revival  appears  to  be  its  perfor¬ 
mance  during  the  Sept.  11  attacks  on 
New  York’s  World  Trade  Center. 

According  to  David  Freund,  an  ana¬ 
lyst  at  IT  research  firm  Illuminata  Inc. 
in  Nashua,  N.H.,  several  Financial  ser¬ 
vices  businesses  in  the  towers  and  nu¬ 
merous  others  in  the  immediate  vicini¬ 
ty  had  OpenVMS  disaster-tolerant 
clusters  with  backup  sites  outside  the 
area.  Every  one  of  them  had  their  oper¬ 
ations  running  just  moments  after  the 
catastrophe,  says  Freund. 

Following  that  awful  day,  OpenVMS 
seems  to  have  gained  new  prominence. 
In  some  IT  circles,  it’s  now  regarded  as 
the  creme  de  la  creme  in  disaster  re¬ 
covery  and  high  availability,  according 
to  users  and  analysts. 

“OpenVMS  uptimes  can  be  mea¬ 
sured  in  years,”  says  Stenz.  “This  is 
certainly  preferable  to  a  culture  of  re¬ 
booting  and  disruption  that  plagues 
other  platforms  due  to  viruses,  Tro¬ 
jans,  denial-of-service  attacks  and  end¬ 
less  patching  of  systems.” 

OpenVMS  Globalization 

It  isn’t  just  U.S.  companies  that  are  re¬ 
maining  on  or  rediscovering  Open¬ 
VMS.  The  operating  system  has  main¬ 
tained  a  strong  hold  overseas,  accord- 


If  you’re  about  to  buy  new  Alpha  hard¬ 
ware,  buy  with  room  for  growth  so  that 
you  don’t  back  yourself  into  a  corner  later 
on  if  your  porting  plans  don't  work  out  as  in¬ 
tended.  Such  systems  work  well  and  area 
known  technology.  “Alpha  purchases  are  es¬ 
timated  to  still  be  in  the  double-digit  thou¬ 
sands  of  units  sold  each  year,"  says  consul¬ 
tant  Terry  Shannon. 

Move  from  Alpha  to  Itanium-based 
systems  if  you  gain  advantages,  such  as 
performance  (that’s  probably  a  few  years 
away)  and  consolidation.  Also  be  aware  of 
support  costs  for  Alpha,  which  will  probably 
rise  above  those  for  Itanium  boxes.  Howev- 


Why  OpenVMS  Hasn’t  Faded  Away 


Performance 

OpenVMS  can  handle  3,000  simultane¬ 
ous  active  users  and  almost  2  million  data¬ 
base  transactions  per  minute  on  Oracle. 


Uptime 

It's  quite  normal  for  VMS  cluster  uptimes 
to  be  measured  in  years.  User  after  user 
has  verified  this. 


Clustering 

OpenVMS  offers  shared-everything  clus¬ 
tering,  i.e.,  applications  running  on  96 
servers  can  simultaneously  write  to  the 
same  files  on  shared  disks.  If  one  server 
goes  down,  there’s  no  data  loss,  and  the 
application  stays  up.  Similarly,  two  physi- 


ing  to  Colin  Butcher,  a  systems  archi¬ 
tect  at  systems  integrator  XDelta  Ltd. 
in  Bristol,  England,  who  has  20  years’ 
experience  on  OpenVMS  for  clients 
such  as  HP,  Ikea  International  AS,  the 
U.K.’s  air  traffic  control  service  and  the 
U.K.  National  Health  Service. 

When  Sony  Corp.  opened  its  Bar¬ 
celona  Center  for  Distribution  (BCD) 
in  Spain  12  years  ago,  it  trusted  its  busi¬ 
ness-critical  systems  to  VAX/VMS. 

The  facility  is  highly  automated  and 
runs  24  hours  a  day,  six  days  a  week  in 
order  to  keep  up  with  tight  deadlines 
for  the  distribution  of  Sony  and  Aiwa 
products  throughout  southern  Europe. 

Daniel  Sanchez  Reina,  BCD’s  IT 
manager,  lists  the  usual  reasons  for 
choosing  the  operating  system:  its 
robustness,  reliability,  powerful  fea¬ 
tures,  high  performance  and  memory 
management. 

“You  get  true  clustering  on  VMS  as 
the  number  of  machines  becomes 
transparent  to  you;  they  work  as  a  sin- 


er,  don’t  rush  to  be  the  first  to  use  the  new 
systems  unless  you  have  some  pretty  good 
reasons  to  do  so.  “Most  applications  will  mi¬ 
grate  to  Itanium  with  a  minimum  of  effort, 
mainly  rec  impiiation.”  says  Bob  Gezelter,  a 
software  consultant  in  New  York.  “Programs 
which  contain  special  Alpha-  or  VAX-specific 
code  typically  require  modest  changes.” 

If  everything  you  need  is  supported  on 
Itanium,  then  consider  using  it  from  Day  1, 
but  be  aware  that  you’ll  be  among  the  first  to 
use  it  in  a  production  environment.  “It’s  all 
about  assessing  risk  and  striking  an  appropri¬ 
ate  balance  between  risk  and  costs.”  says 
Butcher. 


cally  separate  data  centers  can  be  part  of 
a  single  VMS  cluster.  This  feature  kept 
several  Wall  Street  firms  in  business  on 
Sept.  11, 2001. 


Disk  Mirroring 

Known  as  volume  shadowing  on  VMS, 
this  feature  mimics  disk  drives  for  applica¬ 
tions  using  a  set  of  virtual  devices.  Syn¬ 
chronously  mirrored  write  operations  are 
transparent  to  users. 


Maximum  Nodes 

OpenVMS  can  run  a  maximum  of  96 
nodes  in  one  cluster,  far  more  than  any 
Unix  or  Windows-based  systems.  That 
equates  to  over  3,000  processors. 


gle  unit,”  says  Sanchez  Reina.  “This  is 
made  possible  by  the  fast,  powerful 
and  clusterwide  lock  manager.” 

In  1998,  BCD  ported  VMS  from 
VAX  to  Alpha.  It  now  runs  a  three- 
machine  Alpha/VMS  cluster  in  con¬ 
junction  with  a  customs  system  and 
optical  archive  running  on  Windows 
2000  Server,  an  HP  Storage  Works  EVA 
5000  storage  array  and  an  Oracle  Corp. 
database. 

Future  Plans 

How  much  longer  will  OpenVMS  re¬ 
main  viable? 

“Our  intention  is  to  keep  on  using 
VMS  until  doomsday,  as  long  as  it 
keeps  innovating  and  providing  the 
highest  standards  in  the  IT  world,” 
says  Sanchez  Reina.  “We  have  no  plans 
to  migrate  to  VMS  on  Itanium,  at  least 
for  now.” 

That  seems  to  be  the  consensus 
among  IT  shops:  Stay  on  Alpha,  milk  it 
for  all  it’s  worth,  and  keep  a  close  eye 
on  developments  in  the  VMS/Integrity 
server  space. 

Like  BCD  and  many  other  users,  Ein¬ 
stein  Healthcare  has  no  immediate 
plans  to  migrate.  Stenz  says  he  has  a 
four-year  lease  on  Alpha  hardware  and 
is  unlikely  to  change  during  that  period. 

“We  are  going  to  adopt  a  wait-and- 
see  approach  to  developments  on  Ita¬ 
nium  and  VMS,”  he  says. 

Meanwhile,  HP  has  had  OpenVMS 
Version  8.1  in  field  testing  on  Itanium 
for  many  months.  At  the  recent  HP 
World  Conference,  it  released  Version 
8.2  for  testing.  The  company  expects 
the  first  shipments  of  OpenVMS/In- 
tegrity  servers  either  late  this  year  or 
early  next  year. 


intersite  Distance  Limit 

The  maximum  distance  allowed  between 
disaster  recovery  sites  is  800  kilometers 
on  OpenVMS.  compared  with  100  kilo¬ 
meters  at  best  on  other  systems. 


Security 

Open  VMS  is  “virtually  unhackabie.”  says 
Ken  Farmer  of  0penVMS.org.  Indeed,  at 
the  DefCon  9  Hacker  Conference  a  couple 
of  years  ago,  OpenVMS  beat  out  Windows 
NT  and  XP,  Solaris,  Linux,  BSD  and  others 
and  was  graded  as  unhackabie  by  the  best 
hackers  in  the  business,  according  to 
Farmer. 

-Drew  Robb 


Few  anticipate  significant  problems 
in  the  system  or  in  porting  applications 
from  Alpha  to  Itanium. 

“The  OpenVMS  APIs  are  so  correct 
architecturally  that  the  operating  sys¬ 
tem  has  not  required  substantial 
change  since  its  original  design  in 
1977,”  says  Bob  Gezelter,  a  software 
consultant  in  New  York  who  has  tested 
the  new  system.  “OpenVMS  on  In¬ 
tegrity  is  a  case  of  seamlessly  assimi¬ 
lating  a  new  processor,  not  using  a 
high-tech  shoehorn  to  force  an  old  ar¬ 
chitecture  into  an  ill-fitting  shoe.” 

XDelta’s  Butcher  has  also  tested 
Itanium/VMS.  Other  than  needing 
some  time  to  figure  out  the  console  in¬ 
terface,  he  says  he  found  that  VMS 
seemed  to  run  and  behave  just  as  it  al¬ 
ways  does. 

Butcher  does,  however,  express 
some  reservations.  “Performance 
might  be  an  issue  at  the  moment,”  he 
says.  “The  big  Alphas  probably  outper¬ 
form  the  larger  Itanium  boxes,  but  that 
will  change  with  time.” 

Few  Alpha  users  are  in  a  hurry  to 
make  the  switch. 

“After  seeing  where  the  market  and 
technology  direction  is  heading,  we 
may  adjust  our  direction  after  the  third 
year  of  our  lease,”  says  Einstein 
Healthcare’s  Stenz.  “Depending  on 
how  things  play  out  on  Itanium  64  and 
VMS,  we  could  very  well  then  migrate 
to  that  architecture  or  extend/augment 
our  ES47.”  O  50085 


MORE  ONLINE 

For  a  list  of  vendors  with  products  that  support 
OpenVMS.  visit  our  Web  site: 

OQuickLink  50091 
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HOW  ECC  WORKS 


Error  Checking 
And  Correction 


DEFINITION 

Error  checking  and  correction  (ECC) 

is  the  process  of  detecting 
errors  during  the  transmission 
or  storage  of  digital  data  and 
correcting  them  automatically. 
This  usually  involves  sending  or 
storing  extra  bits  of  data  accord¬ 
ing  to  specified  algorithms. 


BY  RUSSELL  KAY 

henever  we  send 
data  —  whether  it’s 
audio  signals  over  a 
phone  line,  a  data 
stream  or  a  legal  document  — 
to  someone  else,  we  need  to 
know  that  what  arrives  on  the 
other  end  is  identical  to  what 
we  sent.  Similarly,  whenever 
we  store  data  on  disk  or  tape, 
we  need  assurance 
when  we  retrieve  it 
that  it  hasn’t  been  al¬ 
tered.  Accurate  data  is 
absolutely  essential 
for  computations, 
record  keeping,  trans¬ 
action  processing  and  online 
commerce. 

Unfortunately,  storing  and 
transmitting  data  both  involve 
the  actions  of  physical  entities 
in  the  real  world:  electrons, 
photons,  atoms,  molecules, 
wires,  contacts  and  more.  This 
means  there’s  always  some  de¬ 
gree  of  uncertainty  because 
background  noise  is  ever  pre¬ 
sent  in  our  physical  universe 
and  might  alter  or  corrupt  any 
given  data  bit. 

Error  Detection 

Early  in  the  computer  revolu¬ 
tion,  some  powerful  tech¬ 
niques  were  developed  first  to 
detect  and  later  to  correct  er¬ 


rors  in  data.  The  most  obvi¬ 
ous,  and  perhaps  least  effi¬ 
cient,  way  to  find  data  changes 
is  to  repeat  each  unit  of  data 
multiple  times  and  then  com¬ 
pare  the  copies.  This  method 
is  so  inefficient  that  it’s  not 
used  for  error  detection  — 
though  the  same  idea  is  used 
in  RAID-1  (disk  mirroring)  for 
fault  tolerance. 

The  best-known 
error-detection  method 
is  called  parity,  where 
a  single  extra  bit  is 
added  to  each  byte  of 
data  and  assigned  a 
value  of  1  or  0,  typical¬ 
ly  according  to  whether  there 
is  an  even  or  odd  number  of 
“1”  bits.  The  receiving  system 
calculates  what  the  parity  bit 
should  be  and,  if  the  result 
doesn’t  match,  then  we  know 
that  at  least  one  bit  has  been 
changed,  but  we  don’t  know 
which  bit  is  wrong.  It’s  also 
possible  that  the  data  is  entire¬ 
ly  correct  and  the  parity  bit  is 
garbled.  If  two  bits  have  been 
altered,  however,  the  changes 
cancel  out:  the  data  will  be 
wrong  but  the  parity  bit  won’t 
signal  an  error. 

Two  other  established  er¬ 
ror-detection  techniques  are 
checksum  (add  up  all  the  bits 
of  the  entire  message,  docu¬ 


ment  or  program  and  produce 
a  single  sum)  and  cyclic  re¬ 
dundancy  check,  which  oper¬ 
ates  on  groups  of  bits  at  a  time 
and  uses  division,  not  addi¬ 
tion.  Checksums  and  CRCs 
are  calculated  before  and  after 
transmission  or  duplication 
and  then  compared.  However, 
checksums  and  CRCs  alone 
can’t  verify  data  integrity, 
since  the  algorithms  are 
known  and  it’s  possible  to  in¬ 
troduce  intentional  changes 
that  these  methods  won’t  de¬ 
tect.  A  more  secure  way 
would  involve  cryptographic 
hash  functions,  one-way  math¬ 
ematical  operations  whose  use 
of  secret  encryption  keys  pre¬ 
cludes  making  undetectable 
alterations. 

Error  Correction 

Thus  techniques  exist  that 
will  let  us  find  errors  in  our 
data,  but  then  what?  One  way 
to  get  the  right  stuff  is  just  to 
ask  the  sending  party  or  de¬ 
vice  to  resend  it.  If  there  are  a 
lot  of  errors  or  there  is  a  long 
communications  path,  howev¬ 
er,  such  as  when  we’re  sending 
data  halfway  around  this  noisy 
planet,  retransmission  can 
dramatically  slow  down  com¬ 
munications. 

What’s  needed  is  a  system 
that  will  find  any  errors  and 
correct  them  automatically.  It 
turns  out  that  we  can  create 
such  algorithms  (known  as 
error-correcting  codes,  which 
is  the  other  phrase  that  ECC 
sometimes  stands  for)  at  any 
degree  of  precision  we  want, 
but  with  a  trade-off  in  efficien¬ 
cy.  Most  of  the  time,  we  settle 
for  codes  that  can  detect  and 
correct  errors  in  one  bit  and 
detect  but  not  correct  errors 
in  two  or  more  bits.  (A  simple 
illustration  of  how  this  works 
with  a  one-bit  error  is  shown 
in  the  box  above.) 


ECC  ADDS  multiple  parity  bits,  though  calculations  are  usually  applied  to 
complete  words  (typically  32  or  64  bits),  not  single  bytes.  Each  ECC  bit  rep¬ 
resents  the  parity  of  a  different  subset  of  the  data  bits,  and  each  data  bit  is 
normally  included  in  more  than  one  ECC  bit.  This  lets  us  detect  a  1-bit 
error,  identify  the  offending  bit  and  fix  it.  It  also  lets  us  detect  but  not  correct 
2-bit  error.  (For  an  example  of  how  ECC  detects  and  corrects  a  2-bit 
error,  go  to  QuickLink  50352  on  our  Web  site.) 

To  see  how  ECC  works  in  a  very  simplified  form,  let’s  look  at  a  7-bit  chunk 
of  binary  data.  To  this  we  add  three  more  bits  for  ECC  data,  each  calculated 
as  the  parity  bit  for  a  subset  of  the  seven  bits.  Figure  1  shows  the  three 
subsets,  with  sample  data  and  the  calculated  ECC  bits: 


To  simulate  an  error,  let's  alter  the  third  bit  from  1  to  0.  Now  the  received  data 
looks  like  Figure  2,  with  differences  in  red: 


We  can  see  that  the  first  calculated  ECC  bit  doesn’t  match,  so  we  know 
there’s  an  error.  Because  ECC  1  is  the  mismatch,  this  tells  us  that  the  error 
can’t  be  in  Bits  1, 2, 4  or  5  (yes,  that  seems  counterintuitive,  but  parity  can  be 
like  that).  This  leaves  only  Bits  3, 6  and  7.  How  do  we  tell  which?  The  three 
subsets  of  the  data  bits  used  to  create  the  ECC  bits  in  this  example  were 
chosen  so  that  changing  any  single  data  bit  produces  a  different  ECC  value 
than  changing  any  other  data  bit. 

If  we  assume  the  error  is  in  Bit  7,  we  can  change  it  and  recalculate  the 
ECC  values  as  110.  Since  that  doesn’t  match  the  received  100,  we  try  Bit  6, 
which  gives  us  101,  also  not  a  match.  This  leaves  Bit  3;  changing  its  value 
gives  us  the  correct  ECC  bits  and  confirms  the  correct  data. 


Today,  ECC  is  used  in  many 
different  devices,  from  CD 
players  to  computers.  Perhaps 
its  best-known  use  is  in  spe¬ 
cial  ECC  RAM  for  servers,  in 
which  extra  bits  are  designed 
directly  into  the  dynamic 
RAM  chips. 

Looking  to  the  future,  ECC 
could  gain  increased  visibility 
and  adoption  in  the  wireless 
communications  market. 
That’s  because  the  popularity 
of  wireless  communications 
and  the  availability  of  wireless 
products  are  both  predicted  to 
grow  considerably,  but  the 


bandwidth  and  throughput  of 
wireless  channels  will  remain 
considerably  lower  than  those 
of  hard-wired  connections. 
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Lack  of  Control 
Becomes  Nightmare 


Our  security  manager  discovers  that  finding 
out  what’s  really  going  on  in  the  network  is 
a  daunting  task.  By  C.  J.  Kelly 


IHAD  A  BAD  DREAM  the  Oth¬ 
er  night.  In  it,  I  was  sleep¬ 
ing  in  the  back  seat  of  a 
convertible.  I  woke  up  be¬ 
cause  the  air  had  gotten  chilly 
and  the  car  was  swaying.  I 
rubbed  my  eyes  and  tried  to 
shake  the  cobwebs  out  of  my 
mind  as  I  peered  into  the  front 
seat.  No  one  was  driving.  I 
scrambled  over  the  front  seat 
and  took  the  wheel,  only  to 
discover  that  I  had  no 
control  over  the  car. 

It’s  not  that  the  car 
was  careening  out  of 
control;  it  had  a  mind 
of  its  own.  It  was 
steadily  taking  me 
up  a  steep,  winding 
mountain  road  with  cliffs  on 
either  side.  The  road  got  nar¬ 
rower  and  narrower  before 
the  car  finally  came  to  a  stop. 

I  looked  around  and  suddenly 
became  very  afraid.  Then  I  re¬ 
fused  to  continue  the  night¬ 
mare  and  woke  up. 

We  could  spend  some  time 
interpreting  it,  but  I  think  it’s 
pretty  clear  that  this  dream 
represents  how  I  feel  about 
managing  information  secu¬ 
rity.  I’m  driving,  but  I  don’t 
have  control;  we  haven’t  gone 
off  a  cliff,  and  I’m  not  going  to 
be  happy  if  we  do.  I  have  a 
company’s  information  assets 
to  protect,  and  I  don’t  want  to 
have  to  notify  our  customers 
that  their  personal  informa¬ 
tion  has  been  exposed  or  de¬ 
liver  the  news  that  our  net¬ 
work  just  got  “owned.”  To 
keep  the  bad  dreams  at  bay, 

I’m  going  to  have  to  make 
some  changes. 

For  starters,  I  had  it  out  with 
my  boss  the  other  day  and  told 
her  that  I  wanted  complete 
control  over  all  network  secu¬ 
rity  operations,  including  fire¬ 


wall,  virtual  private  network 
(VPN),  router  and  domain 
access  administration.  Those 
things  are  currently  managed 
by  IT  operations,  not  security 
operations.  I  need  additional 
head  count.  I  need  tools.  And  I 
want  an  organizational  change. 
I  don’t  care  about  policy.  I 
don’t  care  about  process  and 
procedure  (Sarbanes-Oxley  be 
damned).  I  care  about  doing 
what  it  takes  to  se¬ 
cure  my  company’s 
information  assets. 

What  brought  me 
to  this  point?  In  my 
last  column,  I  was 
fighting  the  virus 
war.  It’s  going  well. 
We  hired  a  contractor  that 
does  nothing  but  track  down 
infected  systems,  scan  them 
for  viruses  and  spyware,  and 
apply  operating  system  patch¬ 
es.  You  may  ask,  “Why  in  the 
world  isn’t  that  automated?” 
It’s  a  long  story,  but  remem¬ 
ber,  I  inherited  this  network.  I 
didn’t  build  it. 

The  enterprise  antivirus 
system  is  scheduled  for  an  up¬ 
grade  within  the  next  week  or 
two,  and  that  should  allow  for 
tighter  controls  and  less  man¬ 
ual  effort.  The  suspicious  traf¬ 
fic  identified  by  the  outside 
consultants  that  I  had  attrib¬ 
uted  to  viruses  and  Trojan 


I  had  it  out  with  my 
boss  and  told  her  I 
wanted  complete  con¬ 
trol  over  all  network 
security  operations. 


horses  seems  to  have  stopped. 

IT  has  a  number  of  projects 
under  way  for  upgrading  the 
infrastructure  at  the  server 
and  desktop  levels.  My  team 
has  been  actively  involved  in 
these  projects  and  has  provid¬ 
ed  the  security  requirements. 
Until  these  projects  are  com¬ 
pleted,  my  job  is  much  tougher. 
Which  brings  me  to  my  cur¬ 
rent  frustration. 

Clueless 

We  have  no  idea  what  is  real¬ 
ly  going  on  in  the  network. 
(Please,  all  you  security  folks 
out  there  who  have  the  tools 
and  bodies,  no  need  to  re¬ 
spond.)  We  discovered  that  our 
network  intrusion-detection 
system  (NIDS)  is  seeing  only 
50%  of  our  network  traffic.  The 
problem  is  that  we’ve  been  re¬ 
lying  on  port  spanning  to  do 
the  job.  The  theory  behind 
port  spanning  is  that  a  copy 
of  every  packet  that  traverses 
the  switch  is  sent  to  a  monitor¬ 
ing  port. 

We  use  a  switch  port  analyz¬ 
er  (span)  and  remote  span  to 
copy  the  traffic  from  our  vari¬ 
ous  switches  to  the  port  where 
our  probe  resides.  The  NIDS 
passively  monitors  the  traffic 
and  generates  alerts  based  on  a 
rule  set  of  undesirable  activity. 
Trouble  arose  because  of  ses¬ 
sion  limits,  switches  that  don’t 
have  the  capability  of  carrying 
the  rspan  traffic  and  other 
technicalities.  We  also  found 
ourselves  in  a  tug  of  war  with 
IT  over  the  span  ports  them¬ 
selves.  When  you  get  an  alert 
from  the  NIDS  that  says  zero 
events,  you  know  something’s 
wrong.  Did  IT  just  snag  our 
span  port?  We  began  to  re¬ 
search  other  methods  of  “see¬ 
ing”  all  the  traffic. 

What  we  needed  was  a  way 
to  tap  into  the  network  traffic, 
something  that  would  aggre¬ 
gate  full-duplex  traffic  into  a 
single  data  stream  that  our 
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NIDS,  based  on  the  freely 
available  Snort  program,  could 
take  advantage  of. 

We  found  some  good  basic 
information  online  at  Talisker 
Security  Wizardry  (http:// 
securitywizardry.com/taps.htm) 
and  selected  a  product  to  test 
in  our  environment.  Net  Op¬ 
tics  Inc.  in  Sunnyvale,  Calif., 
has  a  port  aggregator  tap  that 
appears  to  allow  full-duplex 
monitoring  with  a  single  net¬ 
work  interface  card  and  has  a 
buffering  method  for  handling 
traffic  overload. 

Next,  we  had  to  decide 
where  to  deploy  the  taps.  Cer¬ 
tainly,  we  would  initially  de¬ 
ploy  one  at  the  firewall,  one  in 
the  demilitarized  zone,  one  to 
monitor  VPN  traffic,  one  to 
monitor  WAN  traffic  and  sev¬ 
eral  on  critical  LAN  segments. 

Ah,  but  how  much  is  this 
going  to  cost?  Each  tap  costs 
about  $950.  That  seems  high, 
but  I’d  rather  pay  more  for  a 
high-powered,  fully  functional 
device  than  Mickey  Mouse 
with  less  expensive  devices 
that  don’t  give  us  what  we 
need.  And  to  think  we  were  go¬ 
ing  to  spend  quite  a  chunk  of 
change  on  event  correlation 
software  because  we  thought 
we  were  seeing  all  the  traffic. 

The  good  news  is  that  we 
discovered  a  serious  issue  and 
found  a  way  to  address  it.  The 
timing  was  perfect  because  I 
was  able  to  adjust  the  budget 
forecast  to  include  the  solu¬ 
tion.  The  bad  news  is  that  I 
still  need  to  find  a  way  to  con¬ 
vince  my  manager  that  net¬ 
work  security  is  a  serious  is¬ 
sue.  To  be  effective  at  protect¬ 
ing  the  company’s  information 
assets,  we  need  complete  con¬ 
trol  over  IT  security  opera¬ 
tions.  This  would  require  an 
organizational  change  at  the 
highest  levels  of  the  company. 
The  political  implications  of 
such  a  change  are  as  daunting 
as  the  tasks  at  hand.  I 
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Security  Bookshelf 

■  High-Tech  Crimes  Revealed: 
Cyberwar  Stories  From  the 
Digital  Front,  by  Steven  Brani- 
gan;  Addison-Wesley,  2004. 

The  author,  an  in¬ 
ternationally  rec¬ 
ognized  computer 
security  expert, 
has  been  involved 
in  both  private-  and 
public-sector  secu¬ 
rity  investigations. 

Particularly  inter¬ 
esting  is  his  descrip 
tion  of  how  law  enforcement 
has  progressed  in  the  area  of 
investigating  computer  and 
high-tech  crimes.  While 
Branigan  details  a  variety  of 
investigations,  the  chapter  on 
how  -  and  how  not-  to  run  a 
high-tech  investigation  was 
the  most  enlightening.  Even 
though  it’s  about  400  pages 
long,  this  is  an  enjoyable  read. 


IBM  Offers  Monthly 
Security  Reports 

IBM  has  introduced  a  security 
service  that  offers  a  concise 
monthly  report  of  global  net¬ 
work  threats.  Designed  to  help 
organizations  assess  their  se¬ 
curity  needs  from  a  business 
perspective,  IBM  Security  In¬ 
telligence  Services  reports 
can  be  customized  by  indus¬ 
try.  Subscriptions  start  at 
$10,000  to  $15,000  a  year. 
Each  report  is  about  a  page 
and  a  half  long,  with  a  threat- 
level  score  and  advice  about 
how  to  address  critical  issues. 

New  Symantec 
Security  Appliance 

Symantec  Corp.  announced  a 
line  of  security  appliances  for 
branch  offices.  The  Symantec 
Gateway  Security  Appliance 
400  Series  devices  feature  a 
firewall,  intrusion  prevention 
and  detection,  antivirus  policy 
management,  content  filtering 
and  virtual  private  networking. 
They  can  function  as  secure 
wireless  LAN  access  points 
and  be  centrally  managed. 
Pricing  starts  at  $420  per 
appliance. 
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Ascential  to  Develop 
New  User  Interface 


■  Data  integration  application 
vendor  Ascential  Software  Corp. 
in  Westboro,  Mass.,  last  week  an¬ 
nounced  a  new  self-adapting  in¬ 
terface  for  its  Enterprise  Integra¬ 
tion  Suite.  The  interface  will  be 
able  to  anticipate  users’  tasks 
and  offer  execution  guidance,  ac¬ 
cording  to  the  company.  It  will  be 
in  beta  in  the  first  quarter  of  2005. 


Sendmail  Offers 
Content  Manager 

■  Mailstream  Content  Manager 
from  e-mail  security  vendor 
Sendmail  Inc.  is  available  now. 
The  product  features  e-mail  con¬ 
tent  policy  management  and  anti¬ 
spam  and  virus  protection.  It  also 
has  a  management  console  that 
allows  business-specific  policies 
to  be  easily  changed  or  added, 
according  to  the  Emeryville, 

Calif.,  company.  The  application 
starts  at  $16,000  for  500  users, 
with  a  one-year  antivirus  and 
antispam  update  subscription. 


Microsoft  Releases 
Migration  Tool  Kit 

■  Microsoft  Corp.  released  a  free, 
downloadable  migration  tool  kit 
for  the  Virtual  Server  Migration 
2005  software  it  recently  re¬ 
leased.  The  Virtual  Server  2005 
Migration  Toolkit  enables  users 
with  server  hardware  running 
Windows  NT  4.0,  Server  2000  or 
Server  2003  to  migrate  to  a  vir¬ 
tual  machine  environment  run¬ 
ning  on  Virtual  Server  2005.  The 
tool  kit  is  also  intended  to  help 
users  migrate  VMware  Inc.’s  vir¬ 
tual  machine  software  to  Micro¬ 
soft’s  Virtual  Server  2005. 


Inovis  Certifies 
Interoperability 

■  Inovis  Inc.  announced  that  its 
BizManager  3.0  trading  partner 
connectivity  software  has  been 
certified  for  Applicability  State¬ 
ment  2  interoperability.  BizMan¬ 
ager  3.0  will  be  generally  available 
in  December,  the  Alpharetta,  Ga.- 
based  company  said. 
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Make  Vendors  Pay 
For  Security  Flaws 


INFORMATION  INSECURITY  is  costing  us  bil¬ 
lions.  We  pay  for  it  in  theft  —  information  and 
financial  theft.  We  pay  for  it  in  productivity  loss, 
both  when  networks  stop  working  and  in  the 
dozens  of  minor  security  inconveniences  we  all 
have  to  endure.  We  pay  for  it  when  we  have  to  buy  se¬ 
curity  products  and  services  to  reduce  those  other  two 
losses.  We  pay  for  security,  year  after  year. 

Unfortunately,  all  the  money  we’re  spending  isn’t 
fixing  the  problem.  We’re  paying,  but  we  still  end  up 
with  insecurities.  The  problem  is  insecure  software. 


It’s  bad  design,  poorly  im¬ 
plemented  features,  inade¬ 
quate  testing,  and  security 
vulnerabilities  from  soft¬ 
ware  bugs.  The  money  we 
spend  on  security  goes  to¬ 
ward  dealing  with  the  ef¬ 
fects  of  insecure  software. 

And  that’s  the  problem. 

We’re  not  paying  to  im¬ 
prove  the  security  of  the 
underlying  software.  We’re 
paying  to  deal  with  the  vul¬ 
nerabilities  rather  than 
eliminating  them. 

The  only  way  to  improve 
the  situation  is  for  the  ven¬ 
dors  to  fix  their  software, 
and  they  won’t  do  that  until  it’s  in 
their  financial  best  interest  to  do  so. 

Today,  the  costs  of  insecure  software 
aren’t  borne  by  the  vendors  that  pro¬ 
duce  it.  In  economics,  this  is  known  as 
an  externality:  the  cost  of  a  decision 
that’s  borne  by  people  other  than 
those  who  are  making  the  decision. 

There  are  no  real  consequences  to 
the  vendors  for  having  bad  security  or 
for  having  low-quality  software.  Even 
worse,  the  marketplace  often  rewards 
low  quality.  More  precisely,  it  rewards 
additional  features  and  timely  release 


dates,  even  if  they  come  at 
the  expense  of  quality. 

If  we  expect  software 
vendors  to  reduce  the 
number  of  features  in  their 
products,  lengthen  devel¬ 
opment  cycles  and  invest 
in  secure  software  devel¬ 
opment  processes,  it  needs 
to  be  in  their  financial  best 
interest  to  do  so.  If  we  ex¬ 
pect  corporations  to  spend 
significant  resources  on 
their  own  network  security 
—  especially  the  security 
of  their  customers  —  it 
needs  to  be  in  their  finan¬ 
cial  best  interest  to  do  so. 

Liability  law  is  one  way  to  make  im¬ 
proving  security  in  the  best  interests 
of  those  organizations. 

The  risk  of  liability  raises  the  costs 
of  doing  it  wrong  and  therefore  in¬ 
creases  the  amount  of  money  a  CEO  is 
willing  to  spend  to  do  it  right.  Security 
is  risk  management;  liability  fiddles 
with  the  risk  equation. 

Basically,  we  have  to  tweak  the  risk 
equation  so  a  vendor’s  CEO  cares 
about  actually  fixing  the  problem.  And 
putting  pressure  on  his  balance  sheet 
is  the  best  way  to  do  that. 


BRUCE  SCHNEIER  is  CTO  at 
Counterpane  Internet 
Security  Inc.  and  author 
of  Beyond  Fear:  Thinking 
Sensibly  About  Security 
in  an  Uncertain  World 
(Oxford  University 
Press,  2002).  He  can 
be  reached  at 
www.schneler.com. 


Clearly,  this  isn’t  all  or  nothing. 
There  are  many  parties  involved  in  a 
typical  malicious  attack.  There’s  the 
company  that  sold  the  software  with 
the  vulnerability  in  the  first  place. 
There’s  the  person  who  wrote  the  at¬ 
tack  tool.  There’s  the  attacker  himself, 
who  used  the  tool  to  break  into  a  net¬ 
work.  There’s  the  owner  of  the  net¬ 
work,  who  was  entrusted  with  defend¬ 
ing  that  network. 

One  hundred  percent  of  the  liability 
shouldn’t  fall  on  the  shoulders  of  the 
vendor,  just  as  one  100%  shouldn’t  fall 
on  the  attacker  or  the  network  owner. 
But  today,  100%  of  the  cost  falls  direct¬ 
ly  on  the  network  owner,  and  that  sim¬ 
ply  has  to  stop. 

We  will  always  pay  for  security.  If 
software  vendors  have  liability  costs, 
they’ll  pass  those  on  to  us.  It  might  not 
even  end  up  being  cheaper  than  what 
we’re  paying  today.  But  as  long  as 
we’re  going  to  pay,  we  might  as  well 
pay  to  fix  the  problem.  Forcing  the 
software  vendor  to  pay  to  fix  the 
problem  means  that  it  might  actually 
get  fixed. 

Currently,  there  is  no  reason  for  a 
software  company  not  to  offer  feature 
after  feature  after  feature.  Liability 
forces  software  companies  to  think 
twice  before  changing  something. 

It  forces  them  to  protect  the  data 
they’re  entrusted  with.  Liability  means 
that  those  in  the  best  position  to  fix  a 
problem  are  actually  responsible  for 
that  problem. 

Information  security  isn’t  a  techno¬ 
logical  problem,  it’s  an  economics 
problem.  And  the  way  to  improve  in¬ 
formation  technology  is  to  fix  the  eco¬ 
nomics  problem.  Do  that,  and  every¬ 
thing  else  will  follow.  ©  50161 
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Cutthroat  competition.  Intense  profit  pressure.  Price  erosion.  Declining  loyalty.  Business  today 
dictates  working  not  just  harder,  but  smarter.  Meeting  these  new  business  demands,  and 
overcoming  the  inherent  challenges,  requires  a  new  generation  of  Bl  solutions  unavailable  from 
traditional  Bl  vendors. 

Siebel,  the  leader  in  customer  analytic  applications,  brings  you  Siebel  Business  Analytics -Bl 
solutions  that  empower  everyone  with  actionable  real-time  insight  from  the  largest  data 
warehouses  and  across  enterprise  sources.  With  a  mission-critical  architecture  that  supports 
multi-terabytes  of  data,  thousands  of  users,  and  24x7  availability.  And  proven  application 
solutions,  with  built-in  industry-specific  best  practices  that  are  flexible,  quickly  implemented, 
integrate  with  your  infrastructure,  and  provide  low  TCO. 

Our  innovative  Bl  solutions  have  catapulted  Siebel  into  the  leadership  position  in  analytic 
applications  for  sales,  marketing,  service,  and  senior  management,  with  over  75%  of  our  customers 
using  Siebel  Business  Analytics  beyond  CRM  and  across  a  full  range  of  enterprise  sources. 

Learn  why  the  most  analytically  sophisticated  companies  rely  on  Siebel.  Visit  www.siebel.com/newgen 
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DB2  DOESN’T  LOCK  YOU  IN. 

DB2  is  middleware,  but  it  is 
anything  but  middle-of-the-road. 

In  fact,  DB2  is  part  of  an  innovative 
family  of  information  management 
products  that  can  integrate  and 
actually  add  insight  to  your  data. 
That’s  big. 

DB2  is  also  the  leading  database 
built  on  and  optimized  for 
Linux*  UNIX*  and  Windows'*  built 
to  take  full  advantage  of  your 
existing  heterogeneous  and  open 
environments,  and  built  to  enable 
true  grid  computing. 


Plus,  there’s  no  constricting  contract. 

DB2  is  also  middleware  with  an  eye  on 
your  resources.  All  of  them.  An  ITG 
study  showed  overall  costs  for  Oracle 
Database  are  up  to  four  times  higher 
than  DB2’.  A  Solitaire  study  found  that, 
on  average,  Oracle  Database  required 
25%  more  time  to  manage  than  DB2? 
And  the  Transaction  Processing 
Performance  Council  showed  DB2  as 
the  overall  price/performance  leader  for 
TPC-C  on  Linux,  UNIX  and  Windows. 
Ahead  of  both  Oracle  Database  and 
Microsoft"  SQL  Server? 


Then  there’s  this:  Oracle  will  drop  the 
current  level  of  support  for  Oracle 
Database  8i  at  the  end  of  2004.  Meaning 
limited  support,  higher  cost  or  a 
complete  migration  to  current  versions. 
Fortunately,  IBM  offers  ongoing,  around- 
the-clock  service  and  support  for  DB2. 

Why  not  move  up  to  middleware  that 
makes  sense?  Through  the  end  of  the 
year,  you  can  get  IBM  DB2  Universal 
Database  by  taking  advantage  of 
our  extremely  compelling  trade-up 
promotion.  Visit  ibm.com/db2/swap 
today  to  find  out  if  you  qualify. 
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IBM.  the  IBM  logo.  DB2  and  the  On  Demand  logo  are  trademarks  or  registered  trademarks  ot  International  Business  Machines  Corporation  in  the  United  States  and  other  countries.  Linux  is  a  registered  trademark  of  Linus  Torvalds.  Microsoft 
and  Windows  are  registered  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  UNIX  is  a  registered  trademark  of  The  Open  Group  in  the  United  States  and/or  other  countries.  Other  company,  product  and 
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Watch  Your  Weblog 

Dangers  lurk  in  corporate 
weblogs,  and  sponsoring 
or  creating  one  is  rife  with 
legal  liabilities.  Here  are 
some  precautions  you 
should  take.  Page  40 


Think  Tank 

A  deeper  dive  into  Alinean’s  ROI 
calculations;  an  unorthodox  ex¬ 
amination  of  the  skills  the  “gamer 
generation”  will  bring  to  the 
workplace;  and  a  new  look  at  IT 
buyer  intentions.  Page  42 


OPINION 

What’s  the  Problem? 

Too  many  people  look  for  a  solution  when 
they  haven’t  yet  identified  the  problem,  says 
Paul  Glen.  In  their  role  as  problem  solvers, 
IT  leaders  need  to  help  their  clients  elimi¬ 
nate  this  fuzzy  thinking.  Page  44 


rn  OUTSOURCING 

Tuneup 

CHANGING  NEEDS  CAN  MAKE  LAST  YEAR’S  OUTSOURCING  STRATEGY  OBSOLETE.  £ 


ASK  THESE  10  QUESTIONS  TO  KEEP  IT  ON  THE  MARK.  BY  MARY  BRANDEL 


any  companies  that  sign  on 
for  outsourcing  services  file 
away  the  contract  and  pull  it 
out  only  when  the  three-,  five- 
or  10-year  term  comes  to  an 
end.  But  it’s  important  to 
regularly  review  not  only 
whether  the  original  contract 
is  still  meeting  your  needs  but 
also  whether  last  year’s  outsourcing  plan  is 
still  relevant  to  this  year’s  business  strategy. 

“Outsourcing  has  become  an  integral  part  of 
our  IT  governance  strategy,”  says  Pavan 
Nigam,  CEO  of  Cendura  Corp.,  a  Mountain 
View,  Calif. -based  application  management 
firm.  “Once  you  accept  that,  you  realize  it 
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MECHANIC 

Tuning  up  your  outsourcing 
strategy  requires  a  skilled 
mechanic  with  “more  than 
the  ability  to  squeeze  ven¬ 
dors,”  say  Robert  McNeill, 
Marc  Cecere  and  Adam 
Brown  in  “Building  the  Ven¬ 
dor  Management  Function,”  a 
March  2004  report  from  For¬ 
rester  Research  Inc. 

The  person  who  develops 
and  reviews  the  outsourcing 
strategy  should  report  to  the 
CIO,  they  say.  He  needs  to 
understand  the  strategic  di¬ 
rection  of  the  organization, 
how  the  business  is  run,  how 
to  negotiate  with  experts  and 
how  to  form  alliances.  Here 
are  some  other  skills  they  see 
as  key  to  this  position: 

■  Strong  oral  and  written 
communication  skills 

■  Contract  negotiation  skills 
for  complex  agreements 

■  The  ability  to  work  with 
executive  management 

■  Knowledge  or  background 
in  metrics  and  measurement, 
with  particular  emphasis  on 
service-level  agreements 

■  Experience  with  various 
outsourcing  and  services 
offerings,  and  pricing  and 
delivery  structures 

■  Understanding  of  and 
experience  with  financial 
reporting 

■  Knowledge  of  and  experi¬ 
ence  with  enterprise  license 
agreements 

Purchasing  personnel 
aren’t  good  candidates  for 
this  role  because  they  lack  a 
strong  background  in  IT,  the 
authors  say.  Good  candidates 
include  IT  managers  and 
business  unit  executives  with 
IT  backgrounds. 

-  Kathleen  Melymuka 


needs  to  be  reviewed  not  on  an  annual 
but  on  a  quarterly  basis.” 

“Too  often,  [an  outsourcing  con¬ 
tract]  becomes  shelfware,”  says  Lorrie 
Scardino,  research  director  at  Stam¬ 
ford,  Conn.-based  Gartner  Inc.  “I  tell 
clients  they  should  get  into  the  habit  of 
reviewing  [their  outsourcing  strategy] 
every  six  months.” 

Mergers,  acquisitions,  divestitures, 
changes  in  the  trading  community  or 
governmental  regulations  —  all  of 
these  circumstances  should  trigger  an 
outsourcing  strategy  review.  With  that 
in  mind,  here  are  10  questions  you 
should  ask  when  updating  your  com¬ 
pany’s  IT  outsourcing  strategy. 

11s  the  business  trying  to  expand 
overseas  or  enhance  its  global  im¬ 
age?  If  your  company  has  no 
previous  experience  overseas, 
this  is  a  particularly  good  time 
to  consider  partnering  with  an 
offshore  technology  provider. 

“If  you  are  looking  to  do  business  in, 
say,  Asia,  you  might  very  well  want  to 
outsource  to  a  provider  that  could  help 
you  do  business  in  that  part  of  the 
world,”  says  Wendell  Jones,  a  senior 
consultant  at  Cutter  Consortium  in 
Arlington,  Mass. 

A  global  company  should  also  con¬ 
sider  using  a  combination  of  its  own 
staff  and  offshore  resources  when  try¬ 
ing  to  polish  its  global  image.  But  be 
wary  of  exceeding  a  70-30  ratio  of  off¬ 
shore  to  internal  staff  for  software  de¬ 
velopment  projects,  he  says.  Letting 
more  than  75%  of  the  development 
work  go  offshore  can  lead  to  serious 
difficulties,  since  off-site  programmers 
may  not  be  as  skilled  as  on-site  staff. 
Also,  off-site  workers  might  not  be  as 
sensitive  to  issues  such  as  integration 
with  existing  systems  or  changing  user 
requirements. 

Cost  cutting  alone  is  not  enough  rea¬ 
son  to  look  offshore,  warns  Nigam,  who 
says  Cendura  plans  to  expand  into  Asia 
and  Europe  in  the  next  12  months.  “I’ve 
seen  so  many  companies  get  excited 
about  hiring  someone  for  $25  an  hour, 
but  chances  are  high  that  they’ll  need 
four  bodies  to  complete  the  work  of 
one  of  their  own  workers,”  he  explains. 
“If  you  make  the  investment  right,  you 
might  get  the  ratio  down  to  1.5-to-l,  but 
you’ll  never  get  a  1-to-l  ratio.” 


Are  new  business  initiatives  likely 
to  overload  your  IT  staff?  When 
new  projects  threaten  to  over¬ 
whelm  the  IT  staff  at  J.B. 

Hunt  Transport  Inc.,  a  trans¬ 
portation  logistics  company 
in  Lowell,  Ark.,  CIO  Kay 


Palmer  looks  for  rote  work  that  she 
can  contract  to  an  outsourcing  suppli¬ 
er.  Typical  examples  include  convert¬ 
ing  files,  expanding  fields  and  translat¬ 
ing  reports  into  different  languages. 

The  alternative  —  outsourcing  new 
projects  —  doesn’t  work  as  well, 
Palmer  says.  The  last  time  J.B.  Hunt 
tried  to  do  that,  the  business  side  was 
still  working  on  requirements  defini¬ 
tions  midway  through  the  project,  re¬ 
sulting  in  scope  creep  that  the  out¬ 
sourcer  couldn’t  manage  or  control. 
The  development  work  was  brought 
back  in-house  within  a  year.  “I’ve 
learned  that  unless  requirements  are 
very  well  defined  and  there’s  not  a  lot 
of  tie-in  with  existing  systems,  out¬ 
sourcing  is  hard  to  do,”  Palmer  says. 

Also  look  at  the  maturity  of  the 
project  when  considering  outsourcing, 
says  Nigam,  who  co-founded  Health- 
eon  (now  WebMD  Inc.).  “If  you’re  in 
the  early  stages  of  product  develop¬ 
ment,  it  requires  close  collaboration 
with  customers  as  well  as  domain  ex¬ 
pertise,”  he  points  out.  While  Nigam 
was  at  Healtheon,  two-thirds  of  out¬ 
sourced  work  was  Release  3.0  or  be¬ 
yond,  he  says. 

31s  the  company  preparing  to  un¬ 
dertake  a  critical  business  objec¬ 
tive  with  a  tight  deadline?  It  can 

make  sense  to  outsource  a 
new  project  when  the  work  is 
extremely  time-sensitive  or 
critical  to  gaining  new  busi¬ 
ness.  At  St.  Luke’s  Medical  Center  in 
Kansas  City,  Mo.,  CIO  John  Wade  de¬ 
cided  to  outsource  the  IT  component 
of  opening  a  “digital  hospital”  by  the 
end  of  next  year. 

“It’s  an  enormous  workload,”  Wade 
says.  The  project  includes  implement¬ 
ing  three  new  software  products, 
determining  the  benefits  of  those 
systems  and  then  retrofitting  them 
into  five  other  St.  Luke’s  locations, 
which  would  also  entail  standardizing 
those  hospitals’  procedures,  he  says. 
“There  was  no  way  to  do  it  unless  we 
hired  15  people  and  trained  them,  and 
even  then,  our  risk  of  not  being  able 
to  make  the  date  was  significant,” 
he  adds. 

A  similar  situation  occurred  at 
Cendura,  when  a  prospective  client 
requested  customized  features  in  a 
software  product.  “We  figured  we 
couldn’t  win  the  deal  using  our  highly 
leveraged  resources  in  the  U.S.,  but 
taking  it  offshore  gave  us  extra  flexibil¬ 
ity,”  Nigam  says.  “If  we  had  to  apply 
very  expensive  resources,  it  would 
have  made  the  deal  less  feasible 
for  us.” 


Is  the  company  planning  to  en¬ 
gage  in  new  lines  of  business? 

Companies  that  have  existing 
outsourcing  relationships 
need  to  review  these  con¬ 
tracts  when  starting  a  line 
of  business,  says  Brad  Smith, 
vice  president  of  research  at  Kennedy 
Information  Inc.,  an  information 
source  on  professional  services  in 
Peterborough,  N.H.  For  example,  if  a 
retail  bank  that  outsources  call  center 
activities  was  expanding  into  broker¬ 
age,  insurance  or  other  financial  ser¬ 
vices,  that  would  require  a  whole 
different  set  of  call  center  training 
and  activities. 

Similarly,  if  a  U.S.-based  company 
was  to  expand  into  a  new  region,  such 
as  Asia,  calls  could  begin  coming  in 
24  hours  a  day  as  opposed  to  12. 

“Those  changes  need  to  be  anticipat¬ 
ed,”  Smith  says. 

Are  there  areas  of  IT  that  don’t  in¬ 
teract  with  other  departments  or 
customers?  J.B.  Hunt’s  Palmer 
says  in-house  staffers  add 
great  value  when  they  regu¬ 
larly  interact  with  customers. 
For  instance,  a  database  ad¬ 
ministrator  who  knows  the  extent  to 
which  the  business  is  affected  when  a 
table  isn’t  available  may  create  a  work¬ 
around  to  make  the  data  available 
more  quickly.  Or  the  help  desk  staff 
may  regularly  inform  the  quality  assur¬ 
ance  team  about  the  problems  it’s  ad¬ 
dressing,  thereby  helping  to  improve 
system  design. 

“In  that  way,  they’re  of  much  more 
value  than  just  answering  calls  and  tak¬ 
ing  care  of  problems,”  Palmer  says.  “If 
you  have  that  level  of  integration,  you 
can  justify  paying  for  people  locally.” 

On  the  other  hand,  she  says,  if  there 
are  areas  where  you  don’t  have  that  re¬ 
lationship,  it  doesn’t  make  sense  to  pay 
a  premium  to  keep  it  in-house. 

6  How  efficient  are  your  IT  opera¬ 
tions?  Earlier  this  year,  Wade 
completed  the  process  of 
determining  whether  to  out¬ 
source  part  or  all  of  his  orga¬ 
nization’s  IT  function.  He 
bases  such  decisions  on  four 
sets  of  metrics:  the  quality  of  St.  Luke’s 
IT  operation,  quantity  of  current  IT 
projects,  quantity  of  IT  projects  over  a 
five-year  time  frame  and  price  of  deliv¬ 
ering  IT  services  to  core  constituents 
over  five  years. 

Wade  would  choose  to  outsource  if 
an  outsourcing  vendor  could  hit  the 
same  metrics  as  St.  Luke’s  internal  IT 
department  and  reduce  operational 
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Tliprr  III  inn  I  CQ  At  a  recent  outsourcing  conference,  Peter  Allen,  managing  di- 
lllLL  VHJHULLU  rector  of  global  practices  at  sourcing  consultancy  Technology 
Partners  International  Inc.,  and  Arnaud  Bernaert,  European  group  controller  at  Baxter  Interna¬ 
tional  Inc.,  discussed  the  three  hurdles  that  any  outsourcing  relationship  must  overcome: 


POSITIVE  ECONOMICS.  Assure  discounted  cash  flow  and  return  on  investment. 

STRATEGIC  POSITIONING.  Protect  operating  margins  and  avoid 
dependence  on  third  parties. 

IMPLEMENTATION  FEASIBILITY.  Ensure  ample  management  attention  and 
resource  commitment  as  well  as  availability  of  suitable  service  providers. 


costs  by  17%  over  five  years.  He  sets 
the  bar  high  because  in  a  long-term  re¬ 
lationship  such  as  outsourcing,  a  fore¬ 
cast  17%  savings  would  likely  turn  into 
about  8.5%  over  a  five-year  period,  he 
says.  “That’s  not  an  easy  job  if,  on  top 
of  that,  [the  vendor]  also  has  to  make  a 
20%  to  30%  profit,”  Wade  says.  Three 
years  ago,  the  best  offers  were  a  4.5% 
overall  cost  reduction  and  a  7%  cost 
reduction  in  labor  only.  This  year, 
Wade  says,  no  one  even  responded  to 
his  request  for  proposals. 

Still,  Wade  faithfully  conducts  this 
review  every  three  years.  “You  have  a 
responsibility  as  CIO  to  say  you’re  pro¬ 
viding  the  most  cost-effective  service 
you  can,”  he  says.  “If  I  could  outsource 
the  network  at  a  cost-effective  level,  I 
would  do  it  because  internally,  it’s  a 
major  strain  on  the  IT  group.” 


7  Have  outsourcing  trends  changed? 

Palmer  keeps  her  eyes  and 
ears  open  to  what  her  peers 
and  competitors  are  doing  on 
the  outsourcing  front.  That 
includes  listening  for  new 
trends  in  outsourcing  options. 
“At  times,  the  options  that  were  avail¬ 
able  a  few  years  ago  may  have  been  re¬ 
placed  by  something  that’s  more  palat¬ 
able,”  she  says. 

For  instance,  J.B.  Hunt  looked  into 
call  center  outsourcing  a  few  years  ago 
but  decided  that  its  customers  really 
needed  to  feel  they  were  talking  with  a 
local  company  representative,  local  ac¬ 
cent  and  all.  This  year,  after  attending 
a  computer  conference,  Palmer  heard 
about  call  center  outsourcers  in  rural 
Arkansas  [QuickLink  49795].  After  re¬ 
viewing  cost  vs.  benefits,  she  deter¬ 


mined  that  it  wasn’t  worth  it,  but  this 
type  of  networking  may  eventually 
lead  to  a  workable  alternative. 

8  Have  there  been  changes  in  the  IT 
talent  market?  Even  in  these 
tough  economic  times,  it’s  im¬ 
portant  to  keep  an  eye  on  IT 
labor  costs  and  supply.  “Be¬ 
fore  I  would  look  at  outsourc¬ 
ing  an  entire  function,  I  would 
expect  to  be  faced  with  issues  such  as 
high  cost  of  hire,  escalating  people 
costs  that  are  out  of  control  and  high 
turnover,”  Palmer  says.  J.B.  Hunt’s 
turnover  is  only  4%,  and  salary  costs 
are  reasonable,  so  outsourcing  isn’t 
tempting  now. 

91s  your  current  outsourcing  ven¬ 
dor  meeting  its  benchmarks  and 
offering  competitive  pricing?  It’s 
not  easy  to  determine  if  the 
deal  you  signed  on  for  is  still 
a  good  one  a  couple  of  years 
into  it.  Other  outsourcers 
won’t  rush  to  provide  you  with  a  com¬ 
petitive  bid,  knowing  that  you’re  still 
tethered  to  a  deal,  says  Bob  Tevelson, 
a  vice  president  at  A.T.  Kearney  Inc., 
a  management  consulting  firm  in 
Chicago. 

Start  by  checking  whether  the  con¬ 
tract  requires  you  to  buy  more  service 
than  you  need  or  to  spend  more  on  it 
than  you  should.  Though  your  contract 


may  not  allow  you  to  bring  services 
back  in-house,  there  should  be  enough 
flexibility  to  change  service  levels,  skill 
sets  or  the  location  of  workers.  For  in¬ 
stance,  Tevelson  says,  “you  can  work 
with  the  provider  to  selectively  shift 
applications  offshore  to  support  the 
objective  of  cost  reduction.” 

Are  your  strategic  objectives 
still  being  met  through  the 
arrangement?  “You 
thought  it  was  good  deal 
when  you  got  into  it, 
but  the  deck  chairs 
shifted  on  the  ship,  and 
now  what  do  you  do?”  Tevelson  asks. 
It’s  difficult  to  prematurely  terminate 
an  outsourcing  contract,  so  experts 
recommend  building  in  terms  to  the 
deal  that  accommodate  changing  busi¬ 
ness  needs.  For  instance,  what  if  you 
outsource  your  call  center  function 
and  then  divest  a  particular  business 
unit,  leading  to  a  drop  in  call  volumes? 
“In  a  productive  relationship,  the 
parties  will  try  to  renegotiate  terms 
and  conditions  to  make  up  for  the  lost 
volume,”  Scardino  says.  After  all,  it’s 
important  that  the  outsourcing  rela¬ 
tionship  remain  mutually  beneficial. 

O  50044 


Brandel  is  a  Computerworld  contribut¬ 
ing  writer  in  Grand  Rapids,  Mich.  Con¬ 
tact  her  at  mary.brandel@comcast.net. 
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ORE  AND  MORE  PEOPLE 
are  jumping  on  the  cor¬ 
porate  weblogging  band¬ 
wagon.  At  Microsoft 
Corp.,  for  example,  there 
are  currently  more  than 
1,000  blogs.  Like  many 
companies,  especially  the  IT  vendor 
companies  where  weblogs  tend  to  pro¬ 
liferate,  Microsoft  encourages  the  in¬ 
formal  sites  as  a  way  for  its  employees 
to  stay  close  to  customers. 

But  as  weblogs  have  multiplied,  a 
number  of  legal  issues  have  arisen,  and 
regardless  of  whether  your  company 
sponsors  its  bloggers,  it  may  be  open¬ 
ing  itself  up  to  hidden  liabilities.  Here 
are  some  of  the  dangers  of  corporate 
blogging  and  precautions  companies 
should  consider. 


Libel  and  trade 
■■■■■■  libel.  Bloggers 
who  write  anything  negative  or  defam¬ 
atory  about  a  corporation  or  an  indi¬ 
vidual  are  opening  themselves  and 
their  companies  up  to  the  possibility  of 
libel  suits,  says  David  Carr,  an  attorney 
and  partner  at  London-based  consult¬ 
ing  firm  Big  Blog  Co. 

PRECAUTION:  Do  your  homework.  If  the 
blogger  is  going  to  make  negative  state¬ 
ments  about  a  company’s  or  individual’s 
business  activities,  Carr  says,  “he’s  real¬ 
ly  got  to  do  his  research  and  make  sure 
what  he’s  saying  can  be  proven  to  be 
true  and  not  just  believed  to  be  true.” 


Disclosure  of 

■■■■■■■I  trade  secrets  or 
confidential  information.  Employees  who 
blog  may  intentionally  or  unintention¬ 
ally  share  company  secrets,  says  em¬ 
ployment  attorney  Michael  Karpeles,  a 
principal  at  Chicago-based  law  firm 
Goldberg,  Kohn,  Bell,  Black,  Rosen- 
bloom  &  Moritz  Ltd.  Information  such 
as  the  finances  or  marketing  and  busi¬ 
ness  strategies  of  the  employer  can 
cause  damage  to  the  company  if  it  gets 
into  the  wrong  hands.  And  a  blogger 
who  lets  slip  personal  information 
about  other  employees  may  be  open- 


Biog:  (noun)  a  contraction 
of  Web  log,  an  online  journal  of 
chrpnologicaily  displayed  information 
such  as  ideas,  observations  and 
opinions,  presented  in  an 
informative  but  informal  and 
accessible  style.  Maintaining  a 
eb  log  is  described  as  blogging, 
and  the  person  contributing  and 
administering  such  a  Web  site 
is  called  a  blogger.  Blogs  are  public 
and  searchable  on  the  Internet. 


SOURCE  BIG  Bl  OG  CO. 


corporate  blogs. 

BY  LINDA  ROSENCRANCE 


ing  the  organization  to  prosecution  for 
privacy  infringements. 

PRECAUTION:  Have  employees  sign  a 
confidentiality  agreement  that  states  they 
will  not  disclose  company  confidential  in¬ 
formation,  Karpeles  says.  “Even  if  they 
haven’t  signed  an  agreement,  most 
states  have  a  trade-secrets  protection 
law  that  would  prohibit  individuals 
from  misappropriating  trade  secrets,” 
he  says.  But  better  to  caution  them  up¬ 
front  than  prosecute  them  later. 


Careless  state- 

■ilaUiU  ments  about  the 
business  that  can  be  used  during  litiga¬ 
tion.  Anyone,  from  the  CEO  to  the  re¬ 
ceptionist,  can  have  a  blog,  whether  it’s 
related  to  the  company’s  Web  site  or 
not,  so  organizations  don’t  know  what 
information  is  out  there  that  could 
hurt  them,  says  Gregory  Rutchik, 
founding  partner  of  The  Arts  and 
Technology  Group,  a  litigation  and 
transactional  law  practice  in  San  Fran¬ 
cisco.  “But  the  reality  is,  if  you  allow 
your  employees  to  blog,  the  likelihood 
that  things  are  going  to  come  back  to 
hurt  you  is  huge,”  he  says. 

Attorney  Diana  McKenzie  agrees.  “If 
the  company  is  encouraging  blogging, 
the  first  thing  I  would  worry  about  is 
discovery,”  she  says,  referring  to  the 
compulsory  disclosure  of  pertinent 
facts  or  documents  to  the  opposing 
party  in  a  civil  action. 

“Blogging  is  one  of  the  most  fertile 
grounds  in  discovery  for  supporting 
any  position,  because  you  have  a  bunch 
of  people  never  conscious  of  how  this 
could  be  used  against  a  company,”  says 
McKenzie,  who  chairs  the  information 
technology  group  at  law  firm  Neal, 
Gerber  &  Eisenberg  LLP  in  Chicago. 

PRECAUTION:  Companies  that  have 
their  own  blogs  should  consider  how  they 
fit  into  the  business  plan,  and  they  should 
craft  policies  to  let  employees  know  what 
they  can  and  can’t  write,  says  Rutchik. 

Karpeles  says  an  employer  should 
create  policies  and  guidelines  about 
what  can  be  included  on  an  employer- 
sponsored  weblog.  Those  guidelines 
should  describe  and  define  the  scope  of 
the  blog.  They  should  also  point  out  is¬ 
sues  that  shouldn’t  be  discussed  and 
materials,  including  company  docu¬ 
ments,  that  shouldn’t  be  posted  to  the 
blog  without  prior  authorization.  An 
employer  can  also  have  policies  or  con¬ 
fidentiality  agreements  for  employees 
who  blog  on  their  own,  says  Karpeles. 

Groove  Networks  Inc.  in  Beverly, 
Mass.,  has  such  a  policy  in  place,  says 
Jeff  Seul,  the  company’s  general  counsel. 
Though  Groove  doesn’t  sponsor  a  cor¬ 
porate  weblog,  employees  could  still 
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Big  Bloggers 

Some  companies  sponsor 
corporate  blogs.  Others 
allow  employees  to  blog 
informally.  A  small  but  growing  number  of 
U.S.  organizations  have  blogs  written  by 
their  top  executives.  Here  are  a  few 
corner-office  bloggers: 

■  Mark  Cuban,  CEO,  Dallas  Mavericks 

■  Ray  Ozzie,  CEO,  Groove  Networks 

■  Alan  Meckler,  CEO,  Jupitermedia  Corp. 

■  Michael  Powell,  chairman, 

Federal  Communications  Commission 

■  Jonathan  Schwartz,  chief  operating 
officer.  Sun  Microsystems  Inc. 


Blog  Rules 


Staying  out  of  legal  trouble  is 
paramount,  but  it  won’t  ensure  a 
good  corporate  blog.  These  recommendations  from 
Robert  Scoble  at  Microsoft,  Nick  Wreden  at  the 
American  Marketing  Association,  Rich  Ottum  at 
eStrategyOne  and  other  bloggers  will  help  you 
write  a  corporate  blog  worth  reading: 


Be  original 


Be  authentic 
Have  a  human  voice 
Avoid  jargon 
Tell  the  truth 
Don’t  guess 
Acknowledge  mistakes 


% 


Post  good  news  fast 
Post  bad  news  faster 
Stay  relevant 
Use  a  spell  checker 
Update  frequently 
Once  you  start,  don’t  stop 
Never  change  your  URL 


discuss  company  business  on  personal 
blogs,  he  says.  So  he  has  crafted  guide¬ 
lines  for  employees  to  follow  if  they  do. 
Seul  says  that  if  a  Groove  employee 
chooses  to  talk  about  the  company’s 
technology  on  a  personal  blog,  that 
employee  is  advised  to  post  a  notice  in 
a  prominent  place  making  it  clear  to 
readers  that  his  views  don’t  necessarily 
represent  those  of  the  company. 

Seul  also  reminds  employees  not  to 
disclose  confidential  or  proprietary 
company  information  or  similar  infor¬ 
mation  disclosed  to  Groove  by  any  third 
parties.  He  instructs  them  not  to  publish 
company  documents  without  autho¬ 
rization,  and  he  asks  bloggers  to  be  re¬ 
spectful  of  the  company,  its  employees, 
partners,  affiliates  and  competitors. 

Loose-cannon 
bloggers.  Imag¬ 
ine  that  your  company  changes  strate¬ 
gy.  There  may  be  a  bunch  of  blogs 
about  the  previous  strategy,  but  all  the 
employees  will  dutifully  update  them. 
But  what  if  one  of  those  blogs  is  from 
someone  who  is  no  longer  an  employ¬ 
ee  and  doesn’t  want  to  take  it  down 
or  amend  it?  “It  may  be  awfully 
hard  to  cause  that  to  happen,”  says 
McKenzie. 

PRECAUTION:  Employers  should  set 
up  rules  for  what  happens  to  the  blog  of  a 
former  employee  and  get  all  employees  to 
accept  them.  ©  50037 


Contrarian  View 

Not  all  companies  take  this  advice  to 
heart.  Microsoft  encourages  employ¬ 
ees  to  stay  connected  to  customers 
through  weblogs,  but  it  doesn’t 
ave  a  corporate  policy  on  blog¬ 
ging.  “We  see  blogging  as  a 
great  opportunity  for  direct  and 
deep  two-way  conversations  with 


the  online  community,”  says  Micro¬ 
soft  spokesman  Adam  Sohn.  “We  get 
important,  real-time  feedback  on  our 
products,  and  customers  get  greater 
insight  to  what  is  going  on  with  key 
technologies  inside  the  company, 
which  helps  them  plan  their  business 
and  continue  to  be  successful.” 

Today,  there  are  more  than  1,000 
bloggers  at  Microsoft,  and  that  num¬ 


ber  keeps  growing,  Sohn  says.  But 
there  appears  to  be  little  effort  to 
categorize,  control  or  even  counsel 
them.  “These  [bloggers]  are,  by  and 
large,  the  domain  experts  in  their 
areas,”  he  says,  “and  as  a  company 
full  of  people  passionate  about  tech¬ 
nology,  the  overall  belief  is  that  peo¬ 
ple  will  do  the  right  thing.” 

-  Linda  Rosencrance 
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Drilling  Down 
Into  ROI  Numbers 

WHEN  IT  CONSULTANCY  Alinean  LLC 
came  out  with  corporate  rankings  based  on  its 
new  IT  benchmarking  metric,  the  top  compa¬ 
nies  were  Fannie  Mae  and  Pioneer  Natural  Re¬ 
sources  Co.  But  Wal-Mart  Stores  Inc.,  often 
considered  a  huge  IT  success  story,  was 
nowhere  near  the  top. 

Why?  Alinean ’s  new  metric,  dubbed  ROIT 
(Return  on  IT),  is  intended  to  show  IT’s  rela¬ 
tionship  to  shareholder  value,  as  measured  by 
Economic  Value  Added  (EVA),  a  widely  used 
measure  of  corporate  financial  performance 
[QuickLink  35920],  Wal-Mart’s  modest  score 
„  can  be  explained  by  looking  more  deeply  into 
S  the  ROIT  calculation,  says  Alinean  President 
>  Bill  Johnston.  ROIT  is  calculated  by  dividing 
a  the  company’s  EVA  by  its  IT  spending,  which 


yields  an  ROIT  percentage.  Fannie  Mae’s 
ROIT  was  a  whopping  4,248%.  Wal-Mart’s 
was  42%. 

It’s  not  that  Wal-Mart  has  lackluster  IT  in¬ 
vestments,  Johnston  says.  Wal-Mart  scored 
lower  because,  as  the  biggest  company  in  the 
world,  its  revenue  growth  has  slowed  and  it 
isn’t  as  profitable  as  it  could  be  because  it 
passes  on  its  savings  to  consumers.  But  “IT 
is  what  got  Wal-Mart  to  where  it  is  today," 
Johnston  says.  “It’s  still  an  IT  success  story.” 

ROIT  is  just  a  snapshot,  he  adds.  For  exam¬ 
ple,  Lowe’s  Companies  Inc.  currently  has  a 
higher  ROIT  (84%)  than  rival  Home  Depot 
Inc.  (62%).  But  Johnston  says  Home  Depot 
is  making  big  IT  investments  to  catch  up  after 
years  of  IT  neglect,  and  he  predicts  that  Home 
Depot  will  see  dividends  from  those  invest¬ 
ments  and  a  higher  ROIT  in  the  next  few  years. 

-Mitch  Betts 


Best  Bits 

The  most  useful  parts  of  recent  business 
and  IT  management  books 
THE  BOOK:  Got  Game:  How  the  Gamer 
Generation  Is  Reshaping  Business  Forever, 

by  John  C.  Beck  and 
Mitchell  Wade  (Harvard 
Business  School  Press, 
2004). 


_  Conventional  wisdom 

i  holds  that  gamers - 

those  who  grew  up  play- 
ing  video  games  -  have 
overdeveloped  thumbs,  underdeveloped  minds 
and  zero  social  skills.  This  book  takes  a  fresh 
look  and  finds  that  gamers  (now  90  million 
strong)  actually  have  skills  that  could  be  quite 
useful  in  business:  bold  but  measured  risk-tak¬ 
ing,  an  amazing  ability  to  multitask  and  unex¬ 
pected  leadership  skills. 

But  managers  from  the  boomer  generation 
will  need  to  adjust  to  the  gamers'  selfish  drives 
and  play-to-win  mentality  and  tap  their  instinct 
for  heroism,  the  authors  say.  Most  surprising  of 
all,  the  book  says  that  despite  all  that  time  play¬ 
ing  alone,  gamers  may  turn  out  to  be  good  team 


players.  They  aren’t  any  more  isolated,  introvert¬ 
ed  or  unsociable  than  people  who  take  piano 
lessons  or  play  golf.  -  Mitch  Betts 

Things  to  Ponder 

■  A  report  by  the  CFO  Executive  Board,  a 

research  group  in  Washington,  says  chief  finan¬ 
cial  officers  have  wrongly  tried  to  expand  their 
influence  into  realms  such  as  IT  and  procure¬ 
ment  when  they  should  be  sticking  to  their  core 
responsibility  of  driving  corporate  financial 
performance. 


■  The  No.  1  cause  of  a  failed  merger  or  ac¬ 
quisition  is  ignoring  potential  integration  chal¬ 
lenges,  says  a  study  by  Bain  &  Co.  in  New  York. 
The  No.  2  cause  is  overestimating  synergies. 


■  New  York-based  Korn/Ferry  International 
surveyed  1,951  executives,  and  47%  of  the 
respondents  said  their  companies  still  don’t 
have  procedures  in  place  for  dealing  with 
an  act  of  terrorism  or  a  catastrophic  event. 
And  11%  answered  “don’t  know.” 


■  Some  disaster  recovery  plans  encourage 
employees  to  travel  to  alternate  work  sites  or 
work  from  home  for  the  sake  of  business  continu¬ 


ity.  But  the  series  of  hurricanes  in  Rorida  shows 
that  tactic  may  not  work,  says  Forrester  Research 
Inc.  analyst  Colin  Rankine.  “Residential  power 
restoration  may  take  days  or  weeks,  while  local 
flooding  or  other  infrastructure  failures  such  as 
roads  and  airlines  may  affect  travel  or  equipment 
delivery  to  alternate  sites,”  he  says.  ©  50150 


What’s  your  biggest  concern  about 
enterprise  instant  messaging? 
Security 

Loss  of  employee  productivity 
Support  for  multiple  IM  formats 
IM  spam 

Lack  of  satisfactory  enterprise  IM 
products/services 

BASE:  96  IT  decision-makers  at  U.S. 
businesses  with  more  than  100  employees 


SOURCE.  SAGE  RESEARCH  INC.,  NATICK.  MASS..  AUGUST  2004 


GOT  ANY  BRIGHT  IDEAS?  Send  them  to 
pitches@computerworld.com. 
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Hard  Times  Continue 

Tough  times  are  far  from  over,  say  294 
IT  workers  who  responded  to  a  recent 
survey  by  Amplitude  Research  Inc.  in 
Birmingham,  Mich.  Some  key  findings: 

work  for  companies  that  have 
outsourced  IT  jobs. 

have  not  received  a  raise  in 
over  a  year. 

say  finding  a  new  job  would  be 
somewhat  difficult. 


say  finding  a  new  job  would  be 
very  difficult  or  impossible. 


Graduates  Gain 

The  IT  class  of  2004  is  in  the  money 

-  at  least  compared  with  the  class  of 
2003,  according  to  a  survey  by  the 
National  Association  of  Colleges  and 
mployers.  This  is  le  first  year  since 
2001  that  IT-related  majors  have  seen 
an  increase  in  starting  pay.  According 
to  NACE,  information  sciences  and 
systems  grads  are  earning  an  averai 
salary  of  342,375,  up  10.7%  from 
I  st  year.  Computer  science  gradu¬ 
ates  are  making  49,036,  up  4.1%. 


Job  Tracker 


This  AFL-CIO  database  allows  you  to 
search  by  ZIP  code,  industry  or  com¬ 
pany  name  to  “find  out  which  jobs  in 
your  community  have  been  exported 
or  lost  due  to  trade.”  Try  it: 
www.workingamerica.org/ 
jobtracker/index.cfm 


U.S.  IT  Staffing  Is  Up . . . 

...  but  outsourcing  is  taking  a  toll,  says 
Andrew  Bartels,  an  analyst  at  Forrester  Re¬ 
search  Inc.  Despite  the  furor  over  offshore 
outsourcing,  the  number  of  U.S.  IT  jobs 
actually  grew  in  2003  and  will  continue  to 
grow  from  2004  to  2008,  he  says.  But  off¬ 
shore  outsourcing  is  a  real  phenomenon,  and 
it  will  hold  down  U.S.  IT  job  growth  and  sal¬ 
aries  at  vendor  and  user  companies,  he  adds. 

Forrester  projects  that  IT  departments  will 
grow  3%  annually  through  2008.  That’s  an 
improvement  from  the  job  cutting  of  2001  and 
2002,  but  the  offshore  option  means  that 
companies  will  hire  fewer  IT  workers  than  they 
would  have  in  the  past.  Meanwhile,  product 
development  jobs  at  IT  vendors,  which  led  the 
revival  in  hiring  in  2003  and  2004,  will  slump 
in  2006  and  2007  as  vendors  more  aggres¬ 
sively  take  advantage  of  lower-cost  offshore 
resources,  Bartels  says.  ©  50067 

-  Kathleen  Melymuka 


Companies  Plan 
For  Growth 

Overall  focus  of  the  company  . 

12  months  ago: 

26%  Primarily  growth 

41%  Primarily  cost  control 
25%  About  evenly  split 
8%  Not  sure 

Today: 

27%  Primarily  growth 

32%  Primarily  cost  control 
34%  About  evenly  split 
7%  Not  sure 

12  months  from  now: 

42%  Primarily  growth 

18%  Primarily  cost  control 
32%  About  evenly  split 
8%  Not  sure - 


Base:  244  executives  in  six  countries 

SOURCE:  ‘ACCENTURE  HIGH-PERFORMANCE 
WORKFORCE  STUDY  2004‘ 


We’re  inspired  by  the  human  side  of  data.  Digital  music  and  digital  photography  are 
more  than  just  gigs  of  data.  It’s  enough  head-banging  rock  to  keep  a  jogger  on  pace.  It’s 
giggles  and  grins  for  Grandma  and  Grandpa.  That’s  why  high-capacity  Hitachi  hard  disk 
drives  are  the  industry  choice  for  digital  devices,  fast  runners,  and  proud  parents.  From 
the  smallest  Microdrive  to  the  largest  SAN  solution,  Data  Storage  from  Hitachi. 


HITACHI 

Inspire  the  Next 


hitachiyourdata.com 
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QUICK  HITS 


Management 

Attitudes 

Is  your  top  management  more 
or  less  confident  in  the  economy 
now  than  earlier  this  year? 


Is  Sarbanes-Oxley  having 
an  impact  on  your 
software  spending? 


Spending 
less  3% 


Do  you  use  Linux? 


Are  you  likely  to  standardize 
on  Linux  for  a  significant  part 
of  your  computing? 
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No 
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Is  your  interest  in  Linux 
increasing  or  decreasing  overall? 


No  answer  K|i  in 


Decreasing 


BASE:  75  U.S.  and  25  European  CIOs 
SOURCE:  TechStrat  survey.  Merrill  Lynch  &  Co.. 
New  York.  September  2004 


PAUL  GLEN 

What’s  the  Probllm? 


Those  of  us  in  IT  tend  to  see  the  world 
through  the  lens  of  problems  and  solu¬ 
tions.  Our  entire  work  lives  are  devoted 
to  solving  problems.  One  after  the  other, 
we  knock  them  down. 

This  habit  tends  to  start  early  in  life.  In  school, 
we  are  presented  with  math  problems  —  and  we 
solve  them.  At  home,  we  are  given  toys  to  play  with  — 
and  we  disassemble  and  improve  them.  We  are  given 
broken  computers  —  and  we  fix  them.  We  are  reward¬ 
ed  for  our  ingenuity. 


These  problems  and  so¬ 
lutions  bring  with  them  an 
emotional  boost,  too.  What 
can  beat  the  satisfaction  of 
solving  a  truly  challenging 
problem?  Who  doesn’t  love 
being  the  great  hero  saving 
Aunt  Sadie’s  precious  files 
from  oblivion?  At  the  end 
of  a  particularly  thorny 
problem,  don’t  you  just 
imagine  yourself  spiking 
the  code  in  celebration,  as 
if  you’d  just  caught  a  game¬ 
winning  pass? 

Problems  have  wonder¬ 
ful  motivating  features. 

They  are  compact  and  fi¬ 
nite.  They  start  with  a  chal¬ 
lenge  —  a  call  to  action  (or 
at  least  to  thought)  —  and 
elegant  solutions  signal  triumph. 

We  are  conquering  heroes.  We  stand 
on  Olympus  with  the  gods.  We  solve 
problems. 

If  you  need  evidence  of  how  promi¬ 
nent  problems  are  in  our  thinking,  just 
look  at  the  marketing  materials  for 
almost  any  software  package  or  con¬ 
sulting  company.  They  all  bill  them¬ 
selves  as  your  “solution”  to  something: 
“eBragidocious,  your  customer  solu¬ 
tion.”  “JJG  Solution  Providers.”  “iZap, 
your  e-mail  solution.”  Marketing 
people  don’t  put  that  stuff  in  the  bro¬ 
chures  by  accident.  They  know  exactly 
where  our  emotional  hot  buttons  are 


and  how  to  push  them. 

But  for  people  so  at¬ 
tuned  to  problems,  we 
tend  to  be  remarkably  in¬ 
articulate  about  them.  Very 
smart  and  accomplished 
people  call  me  all  the  time, 
and  the  conversation  goes 
something  like  this: 

“Can  you  help  me?” 
someone  asks. 

“I  don’t  know.  What’s  the 
problem?”  I  reply. 

The  answer  is  almost  al¬ 
ways  something  like,  “Our 
management  team  needs  a 
facilitated  retreat.”  Or,  “We 
need  a  training  program  on 
communications.”  Or,  “We 
need  a  new  project  man¬ 
agement  process.” 

And  then  I  have  a  problem. 

Why?  Because  none  of  those  things 
is  a  problem.  Those  are  all  proposed 
solutions  to  some  unknown  or  un¬ 
articulated  problem.  And  I  have  to 
come  up  with  some  polite  but  probing 
questions  to  try  to  understand  what’s 
going  on. 

Whenever  you  ask  someone,  “What’s 
the  problem?”  and  the  response  is 
phrased  as  the  absence  of  some  solu¬ 
tion,  you  can  be  fairly  certain  that  no 
one  really  knows  what  the  problem  is. 

There  are  good  reasons  why  this 
happens,  none  of  which  is  that  people 
are  stupid  or  unobservant.  The  rea- 


paui.  glen  is  an  IT  man¬ 
agement  consultant  in 
Los  Angeles  and  the  au¬ 
thor  ot  the  award-winning 
book  Leading  Geeks: 
How  to  Manage  and  Lead 
the  People  Who  Deliver 
Technology  ( Jossey  Bass 
Pfeiffer.  2003; 
www.leadinggeeks.com). 
He  can  be  reached  at 
info@c2-comuttkig.com. 


sons  range  from  fear  to  hope. 

FEAR:  For  most  people,  problems  are 
uncomfortable  things.  They  are  dark, 
mysterious,  threatening  things.  They 
have  all  sorts  of  unwelcome  implica¬ 
tions:  “If  I  have  a  problem,  there  must 
be  something  wrong  with  me.”  When 
we  sense  a  problem,  the  natural  reac¬ 
tion  is  to  want  to  do  something  about 
it,  to  make  it  go  away. 

But  that  often  leads  to  making  big 
leaps,  skipping  thought  and  going 
right  to  action.  It’s  easy  to  hop  from 
the  symptom  of  the  problem  right  to  a 
solution  without  carefully  considering 
the  nature  of  the  problem. 

“John  didn’t  find  out  about  the  late 
shipment  until  it  was  too  late  to  do 
anything  about  it,  therefore  we  need  to 
send  our  managers  to  communication 
training.”  Or,  “Sandy,  that  newly  pro¬ 
moted  manager,  said  some  really  hate¬ 
ful  and  unproductive  things  to  her 
staff  at  that  last  meeting,  so  we’d  bet¬ 
ter  get  her  some  coaching.” 

HOPE:  At  the  other  end  of  the  spec¬ 
trum  are  imagined  realities,  vague 
Utopian  musings  of  a  better  future. 
These  can  be  driven  by  truly  extra¬ 
ordinary  visionary  ideas  about  trans¬ 
formations  of  organizations  and  strate¬ 
gies.  Sadly,  they  are  too  often  the  re¬ 
sult  of  a  brilliantly  conceived  market¬ 
ing  program  for  some  sort  of  minor 
technical  gewgaw  foisted  on  over¬ 
whelmed  managers. 

As  experts  in  problem  solving,  our 
responsibility  is  to  recognize  and  ex¬ 
pose  this  sort  of  fuzzy  thinking.  As 
service  providers,  we  help  our  cus¬ 
tomers  best  when  we  ensure  that  we 
are  solving  real  problems  rather  than 
filling  orders.  As  leaders,  we  must  re¬ 
member  that  work  has  the  most  mean¬ 
ing  when  all  concerned  know  toward 
what  end  we  strive.  Absent  solutions 
are  never  problems,  and  as  an  indus¬ 
try,  we  must  stop  acting  as  if  they 
were.  O  50051 


WANT  OUR  0PINI0K? 

OFor  more  columns  and  links  to  our  archives,  go  to 

www.computerworid.coin/opinions 


Don’t  Miss  The  IT 


JOIN  THE  ITIL 
REVOLUTION! 


Attend  this  event  and  we'll 
show  you  how  to  use  the 
best  practices  found  in  the 
Information  Technology 
Infrastructure  Library  (ITIL)  - 
the  world's  most  credible  IT 
service  management 


framework  -  to  "revolutionize" 
your  IT  organization. 


But,  you  don't  have  to  take 
our  word  for  it.  Already 
tens  of  thousands  of  IT 
professionals  from  world 
class  organizations  have 
experienced  powerful  results! 
Now,  it's  your  turn! 


If  you're  new  to  ITIL  and  want 
to  learn  about  it,  contact  Pink 
Elephant  today. 


ARE  YOU  READY 
TO  CHANGE 
YOUR  IT  WORLD? 


Now  in  its  9th  successful 
year,  this  conference  features 
9  trades  with  over  >  sessions, 
including  more  case  studies 
than  ever  before. 
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IT  Careers:  Does  this  Employer  Value  Diversity? 


Companies  covet  a  reputation  for  valuing  diversity.  They 
advertise,  they  talk,  they  count.  But  for  those  IT 
professionals  defined  as  "diverse",  how  do  you  know 
for  sure? 

It's  a  question  that  Annette  Merritt  Cummings  and  Martha 
Ceja  spend  their  careers  evaluating.  Cummings  is  vice 
president/national  director  of  Diversity  Services  for  Bernard 
Hodes  Group.  Ceja  is  a  strategist  with  the  group,  based  in 
Silicon  Valley. 

The  Diversity  Services  organization  looks  at  valuing 
diversity  as  a  process  of  moving  from  an  initial  point 
through  four  phases  that  end  with  inclusion.  Cummings 
defines  inclusion  as  acceptance  of  the  ideas  and  talents 
that  all  people  bring  to  an  organization,  a  long  journey 
from  initial  training  that  helps  an  organization  understand 
why  diversity  matters  from  a  business  stance. 

Cummings  says  there  are  specific  queues  as  to  the  progress 
along  that  continuum.  "The  first  place  you'd  go  in  looking 
at  a  company  is  probably  to  its  website.  Do  they  have 
affinity  groups?  Is  the  site  in  more  than  one  language,  such 
as  Chinese,  Spanish  or  other?  How  many  clicks  does  it  take 
you  to  get  to  some  mention  of  diversity?  If  it  takes  six  or 
seven  before  there's  any  mention,  that  tells  you  this  is  not 
one  of  the  company's  higher  priorities  or  that  the  human 
resources  or  diversity  organizations  has  lost  the  battle  for 
(website)  real  estate." 


Ceja  says  appearances  do  count,  on  the  website  and  in  real 
life.  "Are  there  individuals  (of  diverse  backgrounds)  in 
positions  of  leadership?"  she  asks.  "Seeing  this  (for  any 
person  of  diversity)  is  invigorating  in  terms  of  the 
possibilities  it  represents.  I  advise  people  to  drill  up  further 

-  look  at  the  executive  committee  and  at  the  board  of 
directors.  Look  for  transparency  in  terms  of  how  open  the 
organization  is  about  its  progress  in  valuing  diversity.  Is  it 
something  they  report  on  annually?" 

In  addition,  the  two  diversity  leaders  have  advice  for  IT 
professionals  looking  at  a  career  change.  "If  I  were  looking 
at  new  opportunities,  I  would  look  first  at  an  industry  that 
fascinates  me,  beyond  the  IT  application,  because  that's 
where  the  jobs  are  -  not  in  pure  IT  companies,"  says  Cummings 
The  industries  closest  to  the  consumer,  such  as  automotive 
and  consumer  products,  are  marketers  by  definition  and 
understand  the  changes  in  the  marketplace  in  this  country. 
They  have  embraced  diversity  at  a  more  aggressive  rate." 

Cummings  also  points  to  government  agencies  as  major 
players  in  the  future  of  the  IT  profession.  Agencies  ranging 
from  the  CIA  to  the  Office  of  Personnel  Management  are 
hungry  for  IT  skills;  up  to  70%  of  the  senior  managers 
in  federal  government  are  expected  to  retire  in  the 
next  five  years.  "These  aren't  just  entry  level  jobs  -  these 
are  careers." 

Ceja  says  for  IT  professionals  there  is  a  distinct  advantage 

-  skills  mean  everything.  "In  Silicon  Valley,  if  you  have  the 
skills,  this  becomes  a  color-blind  profession  in  some  ways, 
"these  are  careers,"  she  says. 


The  Four  Stages  of  Diversity 

1 .  Affirmative  Action 


with  Federal,  State  and  local 
nd  equal  opportunity  and  affirmative  action. 


_  diversity  and  providing  diversity  training, 
g  Black  History  month,  Women's  History  month, 
ireciating  the  fact  that  diversity  can  add  value 
ration  and  help  you  achieve 


change  your  culture.  This  is  the  hard 
anging  attitudes  so  that  everyone  is 
lue  of  diversity.  Everyone  understands 
.At  this  stage,  you  start  holding 
ible.  You  may  include  diversity  as  a 
ince  reviews. 


the  organization  has  diverse  teams  in 
as  formal  measurements.  Managers  are 
le  for  their  success  in  fostering  diversity, 
with  bonuses  or  provided  with 
ces. 

Diversity  Services 

For  more  information  about  IT  Careers  advertising, 
please  call:  800.762.2977 

Produced  by  Carole  R.  Hedden 


"DIVERSITY  IN  PRODUCTS, 
SERVICES  AND  PEOPLE" 

THE  SOCIAL  SECURITY  ADMINISTRATION  IN  WOODLAWN, 
MARYLAND  is  seeking  highly  motivated  IT  Professionals  for  the  following 
types  of  positions:  Mainframe  Developers  (COBOL,  CICS);  Internet 
Developers  (Java,  WebSphere,  CGI);  Database  Administrators  (DB2,  IDMS, 
Oracle);  Systems  Operation  Analysts  (SUN/UNIX,  JCL,  TSO/ISPF,  z/OS, 
Control  M) 

COME  JOIN  OUR  WINNING  TEAM!  -  WE  OFFER: 

COMPETITIVE  SALARIES  -  RANGE:  $52,963-$85,867;  A  COMPRE¬ 
HENSIVE  BENEFITS  PACKAGE,  INCLUDING:  RETIREMENT  SAVINGS 
INVESTMENT  PLAN;  HEALTH,  LIFE  AND  LONG  TERM  INSURANCE 
FOR  SELF  AND  FAMILY;  PAID  VACATION,  SICK  LEAVE  AND  10  PAID 
HOLIDAYS;  PAID  OVERTIME  AND  ONGOING  TECHNICAL  TRAINING 
AND  FLEXIBLE  WORK  SCHEDULES.  ALL  OF  THIS  AND  A  POSITIVE, 
CASUAL  WORK  ENVIRONMENT! 

To  apply  go  to  USAJOBS  at:  httD://iobsearch.usaiobs.oDm.oov/  and  select 
the  Social  Security  Administration.  Must  be  a  United  States  citizen  to  apply. 


FT  Project  Manager  Multiple 
positions.  Responsibilities  in¬ 
clude:  Manage  the  design,  de¬ 
velopment  and  implementation 
of  multi-tier  client/server,  MQ 
Series  based  systems,  ADABAS 
/NATURAL  based  systems, 
CICS  and  VSAM  based  sys¬ 
tems,  multi-user,  re-engineering 
applications  for  finance  compa¬ 
nies  utilizing  Legacy  Mainframe 
Finance  Applications,  and  de¬ 
sign  tools  including  C,  C++, 
NATURAL/ADABAS  and  MQ 
Series;  manage  user  accep¬ 
tance  tests  and  user  training; 
and  manage  systems  analysts 
and  other  professional  support 
personnel.  Must  be  willing  to 
travel  to  client  sites  Monday- 
Friday.  Must  have  a  Master's 
Degree  or  foreign  or  educational 
equivalent  in  Computer  Science, 
Engineering  or  a  related  field 
ana  three  years  of  experience 
as  a  Systems  Analyst  or  in  a  re¬ 
lated  occupation,  or  a  Bachelor’s 
Degree  or  foreign  or  educational 
equivalent  in  Computer  Science, 
Engineering  or  a  related  field 
and  five  years  of  experience  as 
a  Systems  Analyst  or  in  a  relat¬ 
ed  occupation.  If  interested,  sub¬ 
mit  resume  in  duplicate  to: 

Ms.  Sandy  Pruitt 
NIIT 

1050  Crown  Polnte  Parkway, 
Suite  500 

Atlanta,  GA  30338 


FT  Project  Manager.  Multiple  po¬ 
sitions.  Responsibilities  include: 
Manage  the  design,  develop¬ 
ment  and  implementation  of 
multi-tier  client/server,  multi¬ 
user,  re-engineering  applica¬ 
tions  for  insurance  companies 
utilizing  Legacy  Mainframe  In¬ 
surance  Applications  -  Vantage- 
One  System,  and  design  tools 
including  SCLM,  TWS,  ZEKE, 
ENDEVOR,  EOS,  DADS,  SAV- 
RS,  SAR,  APC,  PanApt,  Comp- 
areX,  QMF,  Dispatch  and  RDS; 
manage  user  acceptance  tests 
and  user  training;  manage  sys¬ 
tems  analysts  and  other  profes¬ 
sional  support  personnel.  Must 
be  willing  to  travel  to  client  sites 
Monday-Friday.  Must  have  a 
Master’s  Degree  or  foreign  or 
educational  equivalent  in  Com¬ 
puter  Science,  Computer  Infor¬ 
mation  Systems,  Engineering  or 
a  related  field  and  three  years  of 
experience  as  a  Systems  Analy¬ 
st  or  in  a  related  occupation,  or  a 
Bachelor's  Degree  or  foreign  or 
educational  equivalent  in  Com¬ 
puter  Science,  Computer  Infor¬ 
mation  Systems,  Engineering  or 
a  related  field  and  five  years  of 
experience  as  a  Systems  Analy¬ 
st  or  in  a  related  occupation.  If 
interested,  submit  resume  in 
duplicate  to:  Ms.  Sandy  Pruitt, 
NIIT,  1050  Crown  Points 
Parkway,  Suite  500,  Atlanta,  GA 
30338. 


SENIOR  APPLICATIONS  PRO¬ 
GRAMMER-ANALYST  (FINAN¬ 
CE  DEPARTMENT):  Duties  in¬ 
clude:  Under  general  direction, 
the  Senior  Application  Program¬ 
mer/Analyst  formulates  and  de¬ 
fines  systems  scope  and  objec¬ 
tives  in  order  to  design,  develop 
or  modify  information  systems. 
Assists  Project  Leader  in  the 
development  of  detailed  system 
specifications  for  major  system 
installations.  Performs  feasibility 
studies  to  analyze  cost/benefit 
trade-off  of  systems  solutions. 
Initiates  systems  design  specifi¬ 
cations,  and  prepares  flow 
charts,  block  diagrams  and  re¬ 
port  layouts  using  current  design 
techniques  or  functional  pro¬ 
gram  specifications.  Codes  pro¬ 
grams,  generates  program  test 
data,  tests  and  debugs  pro¬ 
grams.  Provides  and  maintains 
program  and  system  documen¬ 
tation.  Provides  technical  guid¬ 
ance  to  less  experienced  Pro¬ 
grammers.  Working  knowledge 
of  all  processes  involved  in  sys¬ 
tems  analysis  and  programming, 
including  design  factors,  hard¬ 
ware  and  software  require¬ 
ments,  system  facilities,  and  job 
control  procedures  required. 
Min.  Reqt's:  BS/BA  (foreign 
equivalent  accepted)  in  EE,  CS, 
IT,  Math  or  related  field  of  study 
PLUS  2  yrs  exp.  in  the  job  of¬ 
fered  or  related  exp.  in  program¬ 
ming  and  or  systems  analysis. 
ALSO:  Must  also  possess  dem¬ 
onstrated  experience  and  profi¬ 
ciency:  (1)  with  the  development 
and  implementation  of  at  least 
one  major  distributed  system  in¬ 
stallation  including  maintenance 
and  modification;  (2)  program¬ 
ming  and  systems  development 
using:  Visual  C++,  VB,  Power¬ 
Builder,  Sybase,  Oracle  &  MS 
SQL  Server  and  Access  SW  da¬ 
tabases;  and  (3)  must  possess 
strong  background  in  mathemat¬ 
ics  to  develop  and  support  actu¬ 
arial  applications.  Basic  pay 
range  is  $56,000  -  $68,000  per 
year  FT  and  standard  company 
benefits.  EEO.  Submit  2  resum¬ 
es  and  respond  to  Case  No. 
2003-00395,  Division  of  Career 
Services,  Labor  Certification 
Unit,  19  Staniford  Street,  1st  FI., 
Boston,  MA  02114. 


Where 
The  Best 
Get  Bette  ! 


www.itcareers.com 
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it  careers.com 


it  careers 


Senior  Account  Manager  wanted 
to  source  and  support  new  tech¬ 
nical  business  development 
opportunities.  Must  have 
Bachelor  s  degree  in  Electrical 
Engineering.  Computer  Science 
or  related  field  and  4  years 
experience  in  corporate  sales  in 
the  software  services  industry, 
including  2  years  experience 
with  project  management  and 
software  development.  Send 
resume  to  Hilary  Gosselin, 
Human  Resources  Manager, 
Lionbridge  Technologies,  Inc., 
492  Old  Connecticut  Path, 
Framingham,  MA01701. 

Seeking  qualified  Software  En¬ 
gineers  and  Programmer  An¬ 
alysts  with  experience  in  any  of 
the  following  tools  and  technolo¬ 
gies:  CCNP,  CCNA,  MCP,  Cisco 
Pix,  Local  Directors,  Aironet 
Access  points,  Checkpoint  fire¬ 
wall,  Packet  Shapers,  Nortel 
Contivity  VPN  Switches,  Cisco 
Network  Registrar  server,  RSA 
Ace  Server,  Websense  URL  fil¬ 
tering,  Cisco  Works,  Whatsup, 
Packet  Sniffer,  Snort  IDS, 
Insight  Manager,  CTX  670. 
Reqmts:  BS  or  MS  degree  w/  2 
or  3  yr.  exp.  in  the  field.  Apply  to: 
Kaltech  International  Corpora¬ 
tion,  3965  Stone  Village  Ct, 
Duluth.  GA  30097  EOE. 

Programmer  Analyst  w/2  yrs 
exp  to  implement,  test  &  de¬ 
ploy  applications  on  Windows 
&  Linux  platforms  using  Visu¬ 
al  Basic,  Visual  C++  and 
Scripting.  Write  &  test  code 
for  Oracle,  Mysql  &  Access 
databases  using  Oracle, 
PL/SQL,  Access  &  SQL.  Use 
HTML,  JavaScript,  Java, 
ASP,  PHP,  C,  MVS/TSO  plat¬ 
form,  FORTRAN,  PL/I,  SAS 
&  JCL.  Mail  res:  Optima 
Technology  Partners,  Inc, 
264  South  River  Rd,  Ste  454, 
Bedford,  NH  03110. 

Project  Managers  to  lead/man¬ 
age  teams  to  study,  analyze, 
customize  and  develop  Portal 
infranet  billing  appls  using  C, 
Pro-C,  Oracle  procedures,  trig¬ 
gers,  Unix  shell  scripts  etc;  lead 
teams  to  develop  custom  GUI 
tools  in  VB  using  portal  COM 
objects;  mentor  in  development 
of  Oracle  triggers,  packages, 
procedures,  view  and  pro-C  for 
data  retrieval/data  migration; 
evaluate,  test,  train  team  mem¬ 
bers.  Require  MS  (or  foreign 
equiv)  in  CS/Computer  Engg  8  1 
yr  exp  in  portal  infranet  billing. 
F/T.  Competitive  salary.  Travel 
involved.  Resumes  to  HR, 
Intercall,  Inc.,  1211  O.G.  Skinner 
Drive,  West  Point,  GA31833. 
Please  refer  Job  ICI1104. 

Programmer  Analysts  to  ana¬ 
lyze,  design  s/w  appls  using 
SAP  R/3,  ABAP/4,  C,  C++, 
Java,  VB,  JSP,  JScript,  HTML 
on  UNIX/Windows  os;  gath¬ 
er/document  reqs  from  user 
community;  test/troubleshoot 
project  appl  code  according  to 
system  objectives.  Require  a 
B.S.  or  foreign  equiv  in  CS/ 
Engg  (any  branch)with  2  yrs 
exp  in  IT.  Competitive  salary. 
F/T.  Travel  involved.  Resume 
to  HR,  Smartsoft  Internation¬ 
al,  Inc.,  3965  Johns  Creek 
Court,  Ste  500,  Suwanee,  GA 
30024. 

Maxil  Technology  Solutions,  a 
computer  consulting  company, 
has  openings  available  for  Pro¬ 
grammer  Analysts.  Duties  will 
include  but  not  be  limited  to 
modifying,  developing  and 
testing  computer  programs, 
and  evaluating  user  requests 
for  new/modified  programs.  A 
degree  is  required.  Will  accept 
foreign  equivalent  of  the  re¬ 
quired  educ.  and/or  its  equiv.  in 
educ.  and  experience.  Send 
resumes  to  HR  Dept.,  Maxil 
Technology  Solutions,  2625 
Butterfield,  Suite  316  W, 
Oakbrook,  IL  60523. 

IT  Careers 
Wants  You! 

Take  the  hassle  out 
of  job  searching  and 
check  us  out  at 
www.itcareers.com 


NET  MATRIX  SOLUTIONS 

Net  matrix  Solutions  has  the  fol¬ 
lowing  positions  open: 

SOFTWARE  ENGINEERS:  to 
research,  design,  develop  com¬ 
puter  software  systems  and  lead 
new  product  development  pro¬ 
jects  to  timely  completion.  Abil¬ 
ity  to  evaluate  and  design  SAP 
software  is  required.  Needs  a 
Masters  in  CS/MIS  or  any  relat¬ 
ed  degree  combined  with  1  + 
years  experience  or  Bachelors 
with  5  years  experience  in  de¬ 
signing  and  developing  comput¬ 
er  software  systems. 

SYSTEMS  ANALYSTS:  to  ana¬ 
lyze,  design  and  develop  opera¬ 
tional  procedures  to  automate 
processing  and  to  develop  new 
systems  to  improve  production. 
Knowledge  of  SAP,  Oracle,  and 
other  business  related  software 
is  essential.  Needs  Bachelors  in 
Engineering/CS  or  in  any  related 
field  combined  with  5  years  rele¬ 
vant  experience  in  designing 
and  developing  computer  soft¬ 
ware  systems. 

Please  send  resumes  to  the  re¬ 
spective  addresses:  Human  Re¬ 
sources,  480  Congress  Street, 
1st  floor,  Suite  #317,  Portland, 
ME  04101. 


CPG,  Inc  a  fast  Growing  soft¬ 
ware  firm  is  looking  for  Program¬ 
mer  Analysts:  Should  have 
bachelor's  degree  in  computer 
science/related  field  with  2  years 
experience  in  any  two  of  the  fol¬ 
lowing  skills:  Design  and  devel¬ 
opment  of  software  applications. 
Java,  J2EE,  EJB,  XML,  Struts, 
VB,  .NET,  C#,  C++,  ASP.  Sur¬ 
pass,  Siebel,  peopleSoft,  SAS, 
EDI,  Cobol,  SunSolaris,  Web- 
services,  WMQI,  MQSeries, 
SAP,  ABAP,  DB2,  MS-SQL, 
Oracle,  SQLPIus*,  0S/390,  Unix, 
WebLogic,  Tuxedo. 

We  accept  foreign  education 
equivalent  of  the  degree,  or  the 
degree  equivalent  in  education 
and  experience. 

Send  resume  and  covering  letter 
to:  CPG,  inc.  250  Regency 
Court.  Suite  #101,  Brookfield, 
Wl  53045. 


COMPUTER  SYSTEMS 
ENGINEER:  MEDICAL 
SYSTEMS  INTEGRATION 


Designs,  develops  and  main¬ 
tains  computer  systems  to 
import  data  from  multiple  plat¬ 
forms/sources,  and  to  manage 
data  within  private  wide  area 
network.  Must  have  B.S.  in 
Electrical  Engineering,  Comp¬ 
uter  Science  or  equivalent,  and 
at  least  two  years  experience  in 
the  job  offered.  50+  hours  per 
week.  EOE,  Drug  Free  Work¬ 
place.  Send  resume  to:  21st 
Century  Oncology  Attn:  Joyce 
White,  2234  Colonial  Blvd.,  Ft. 
Myers,  FL  33907  or  fax 
(239)931-7381. 


Programmer  Analysts/Software 
Enggs.  needed.  Seeking  qual. 
candidates  possessing  MS  or 
equiv.  &/or  rel.  work  exp.  Part  of 
req.  rel.  work  exp.  must  include 
2  yrs  working  w/  Visual  Source 
Safe  &  MS  SQL  Server  8  3  yrs. 
working  w/  Visual  Basic.  Exp. 
may  be  simultaneous.  Duties 
include  design  software,  data¬ 
bases  8  analyze  reqs.  8  busi¬ 
ness  processes.  Work  w /  MS 
SQL  Server,  Visual  Basic.  Visual 
Source  Safe,  DataDynamics 
Active  Reports,  &  ODBC  on 
Windows.  Fwd.  resume,  ref.  & 
salary  req.  to  ECMD,  Inc.,  Attn: 
HR,  2  Grandview  St,  PO  Box 
130,  N.  Wilkesboro,  NC  28659. 


Software  Engineers  (hvng  Masts 
Deg  w/2yr  exp  or  Bach  Deg  w/5 
yrs  exp),  &  Progmr  Analysts  w / 
exp.  for  IT  Co.,  Exp.  must  incl 
comb's  of  Java,  Custom  Portal 
implementation  using  Java  / 
J2EE  Technologies,  Business 
process  re-engineering,  ATG 
architect/manager  for  custom 
J2EE  based  personalization 
websites/portals.  EJB,  Servlets, 
JSP,  C++.  C,  Net,  C #,  COM, 
DCOM,  MQSeries,  MQSI,  Web 
methods,  TIBCO,  Seebeyond, 
EDI,  Gentran,  Harbinger,  TLE, 
Oracle  Clinical,  SAS  Program¬ 
ming,  Cardiff,  Smalltalk.  Report¬ 
ing  services.  Net,  ASP.NET, 
VB.NET,  C#,  ADO.NET,  Web 
Services,  Remoting,  Dataware¬ 
housing,  Business  Objects,  In¬ 
formatics,  Microstrategy,  Actu¬ 
ate,  Siebel,  Informix,  Sybase, 
Oracle,  SQLServer,  DB2,  MS- 
Access,  Unix,  Windows  2000/ 
XP/2003,  Netscape  Application 
Server,  SAP  Basis  for  SAP  R/3 
&  MySAP  Components,  BEA 
Web  Logic;  Cognos  ReportNet 
on  IBM  Websphere.  We  are  also 
looking  for  Networking  Consult¬ 
ants  with  exp  in  global  office 
connectivity,  branch  connectivity 
using  BGP  routing  protocol,  de¬ 
sign, develop,  test  8  implement 
network  solutions.  Must  have 
relevant  exp.  Reply  w/  2  copies 
of  res: 

HRD 

Objectsoft  Global  Services  Inc, 
650  Main  Street,  Suite  #211 
South  Portland,  ME-04106 
Fax:  207-253-5407 
Email: 

resumes@obiectsoftolobal.com 


Programmer/Analyst  needed  for 
Software  Development,  Servic¬ 
es  8  BPO  firm  located  in  Burlin¬ 
gton,  VT.  Job  duties  include:  An¬ 
alyze,  design,  and  develop  com¬ 
puter  applications  and  docu¬ 
ments  for  various  clients  using 
UML  methodologies  and  design 
patterns.  Develop  software  us¬ 
ing  ADO.NET,  ODP.NET,  COM 
and  ATL.  Model  databases  using 
Visio  Architect.  Develop  compli¬ 
cated  queries  and  stored  proce¬ 
dures  on  multiple  databases. 
Applicant  must  have  B.S.  de¬ 
gree  in  computer  science,  engi¬ 
neering,  math,  or  business.  Ap¬ 
plicant  must  also  have  1  yr.  exp. 
in  the  job  duties  listed  above  or 
in  any  computer  related  occupa¬ 
tion  which  must  include  the  skills 
listed  above.  40hrs/wk,  8:00am- 
5:00pm,  Mon-Fri,  $60,000/yr. 
Send  resumes  to.  Job  No. 
29314,  P.O  Box  488,  Montpel¬ 
ier,  VT  05601-0488. 


Programmer/Analyst  needed  for 
Software  Development,  Servic¬ 
es  &  BPO  firm  located  in  Burlin¬ 
gton,  VT.  Job  duties  include: 
Analyze,  design,  develop,  and 
implement  client  server  based 
computer  applications  for  cli¬ 
ents.  Use  NET  framework, 
VC#. NET,  VC++,  STL,  and 
COM/  DCOM.  Perform  work  in 
a  Windows  environment.  Appli¬ 
cant  must  have  B.S.  degree  in 
computer  science,  engineering, 
math,  or  business.  Applicant 
must  also  have  1  yr.  exp.  in  the 
job  duties  listed  above  or  in  any 
computer  related  occupation 
which  must  include  the  skills 
listed  above.  40hrs/wk,  8:00am- 
5:00pm,  Mon-Fri,  $60,000/yr. 
Send  resumes  to  Job  No 
29312,  P.O.  Box  488,  Mont- 
pelier,  VT  05601-0488. _ 


Programmer-Analyst  needed 
to  analyze  specs,  create 
schema,  write  code  using 
Corba  &  test  applies  using 
C++/C,  Java,  SNMP,  NMS, 
HP-UX,  Solaris,  applic 
servers,  Linux,  Informix, 
Oracle,  DB2,  GNU,  TCP-IP, 
Socket  8  Profiler,  OOAD. 
Send  resume  to:  Global 
Consultants,  Attn:  Hireme, 
8800  Grand  Oaks  Cir.,  #100, 
Tampa,  FL  33637. 


Clinical 


Clinical 


Finding  Cures. 
Saving  Children. 

Uniting  Employees. 

Current  Opportunities: 

Systems  Quality  and 
Compliance  Test  Engineer  1 

Research  Informatics  (Job  Number  09265) 

Systems  Quality  and 
Compliance  Administrator  1 
Research  Informatics  (Job  Number  08756) 

Bioinformatics  Associate 
Research  Scientist 

Hartwell  Center  for  Bioinformatics  and 
Biotechnology  (Job  Number  09977) 

To  apply  for  these  positions,  please  log  on  to 

www.stjude.org/jobs 


a 


www.stjudc.org 


An  equal  opportunity  employer 


SENIOR  BUSINESS  SYSTEMS  ARCHITECT  (MULTIPLE  BUSINESS 
UNITS)  -  A  Massachusetts-based  company  involved  in  the  worldwide 
research,  development,  manufacture,  marketing  and  sale  of  audio  prod¬ 
ucts  and  technologies,  has  an  immediate  need  for  a  highly  skilled  Senior 
Business  Systems  Architect  (Multiple  Business  Units).  This  senior-level 
position  will  be  responsible  for  the  planning,  design,  deployment,  and 
post-implementation  enhancement  of  mission-critical  global  hardware 
and  business  systems  software  solutions  for  enterprise-wide  and  web- 
based  f'e-business'')  business  units.  This  position  is  also  responsible  for 
mentoring  technical  personnel  in  the  use  of  systems  and  database  mod¬ 
eling  techniques  and  the  development  of  monitoring,  recovery  and  inci¬ 
dent  response  strategies  and  operational  support  procedures.  Minimum 
education  required  is  a  Bachelor's  degree  in  Computer  Science,  MIS,  or 
a  Business  field  relevant  to  business  systems.  Minimum  experience 
required  is  eight  (8)  years  pre-  or  post-degree  experience  (a  relevant 
Master's  degree  may  be  substituted  for  2  of  the  8  years  required  experi¬ 
ence)  involving  business  systems  software  development,  at  least  3  years 
of  which  specifically  involved  the  development  of  logical  data  models,  and 
the  planning  and  support  of  production  operations  under  both  SQL  Server 
and  Oracle.  Specifically  required  is  the  demonstrated  ability  to  lead  the 
development  and  deployment  of  mission  critical  e-commerce  systems 
architectures,  and  to  model,  design  and  implement  component  and  ser¬ 
vice  based  transaction  processing  systems  using  UML-based  techniques. 
Also  required  is  the  demonstrated  ability  to  develop  and  maintain  infra¬ 
structure  capacity  models,  and  to  co-ordinate  the  deployment  and  man¬ 
agement  of  mission-critical  load-balanced,  highly  available,  and  redun¬ 
dant  server  configurations  to  support  global  operations.  Additionally 
required  is  the  demonstrated  ability  to  translate  logical  data  models  into 
physical  SQL  Server  and  Oracle  database  schemas.  Further  required  is 
the  demonstrated  ability  to  provide  technical  support  to  system  and  data¬ 
base  administrators  in  tuning,  optimization,  backup,  recovery  and  moni¬ 
toring  of  mission-critical  e-business  systems.  Finally  required  is  the 
demonstrated  ability  to  conduct  new  technology  evaluations  and  provide 
project  and  resource  cost  estimations  to  senior  financial  management  for 
capital  budgeting  and  internal  rate  of  return  (IRR)  analysis  of  recom¬ 
mended  hardware  and  software  solutions.  Starting  base  salary  is  $93,000 
per  year,  together  with  ten  (10)  days  paid  vacation,  contributory  medical 
and  life  insurances,  and  other  industry-competitive  benefits  Qualified 
applicants  respond  with  two  (2)  copies  of  resume  only  to:  Case 
#200300358,  Labor  Exchange  Office,  19  Stamford  Street,  1st  Floor, 
Boston,  MA  02114.  An  EOE/MFHV. 


Senior  Enterprise  Infrastructure 
Engineer  wanted  to  participate 
in  arch,  designs  for  the  planning, 
integration  &  development  of 
J2EE  applications.  Must  have 
Master's  deg.  in  Comp.  Sd.  or 
Eng  &  2  yrs.  software  develop¬ 
ment  8  object  oriented  analysis 
8  design  exper.,  incl.  commer¬ 
cial  software  eng.  exper.  in  EJB. 
SOAP,  Weblogic  &  WSAD. 
exper.  in  Content  Mngmnt  or 
Digital  Asset  Mngmnt.  Systems, 
&  exper  in  a  tech,  leadership 
role,  responsible  for  design  8 
development  of  core  functional 
modules  of  J2EE  based  applica¬ 
tion.  (A  Bach,  deg  &  5  yrs. 
exper  can  substitute  for  a 
Master's  8  2  yrs.  exper  )  Send 
resume  to  Human  Resources, 
Job  Code  SE89,  Context  Media, 
Inc.,  1  Providence  Washington 
Plaza,  Providence,  Rl  02903. 


Systems  Analyst  needed  for 
Software  Development,  Servic¬ 
es  8  BPO  firm  located  in  Burlin¬ 
gton,  VT.  Job  duties  include:  As¬ 
sess  performance  and  scalabili¬ 
ty  of  client  company's  Siebel 
Customer  Relationship  Manage¬ 
ment  (CRM  System)  product  for 
the  purpose  of  improving  perfor¬ 
mance.  Build  scripts  using  Load 
Runner  to  assess  and  applica¬ 
tions  performance  for  large 
enterprise  software  systems. 
Prepare  documentation  and 
make  recommendation  to  the 
client  regarding  hardware  and 
third  party  software  usage  Work 
in  both  UNIX  and  Windows  envi¬ 
ronments  Applicant  must  have 
B.S.  degree  in  computer  sci¬ 
ence,  engineering,  math,  or  bus¬ 
iness.  Applicant  must  also  have 
2  yrs  exp.  in  the  job  duties  listed 
above  or  in  any  computer  relat¬ 
ed  occupation  which  must  in¬ 
clude  the  skills  listed  above 
40nrs/wk.  8:00am-5:00pm.  Mon- 
Fri.  $60,000/yr  Send  resumes 
to:  Job  No.  29208,  P.O  Box  488, 
Montpelier,  VT  05601-0488. 


CW110I04EIMW/W2 


Computerworld  -  InfoWorld  -  Network  World  -  November  1 ,  2004 


SYSTEMS  ENGINEER 
TEAM  LEAD 

Manage  system  engineers  and 
computer  application  developers 
and  other  personnel  to  coordi¬ 
nate  the  design,  development, 
implementation  and  testing,  of 
high  volume  transactional  tele¬ 
phonic  and  web  based  business 
applications  and  database  sys¬ 
tems  for  the  commercial  and 
government  sectors  containing 
highly  confidential  personal  in¬ 
formation,  government  verifiable 
audit  controls  and  interactive 
voice  response,  Manage  profes¬ 
sional  staff  to  resolve  problems, 
design  and  document  useability 
testing  and  ensure  system  func¬ 
tionality  and  performance.  Re¬ 
quires  Bachelors  or  equivalent 
level  degree  in  Computer  Sci¬ 
ence,  MIS,  Statistics,  Engineer¬ 
ing  or  closely  related  field  and 
four  years  experience  in  the 
leadership/management  of  com¬ 
puter  applications  development 
projects.  Qualified  applicants 
must  presently  be  eligible  for 
permanent  employment  in  the 
United  States.  (8:00  a.m.  to  5:00 
p.m.);  40  hours  per  week,  over¬ 
time  as  needed  without  addition¬ 
al  compensation.  Position  is  with 
TALX  Corporation  in  St.  Louis, 
Missouri.  Send  resumes  to:  Ms. 
Ellen  Stanko,  Director  of  Human 
Resources,  TALX  Corporation, 
1850  Borman  Court,  St.  Louis, 
Missouri  63146.  EOE. 


Seeking  qualified  applicants  for 
the  following  positions  in  Mem¬ 
phis,  TN:  Senior  Programmer 
Analyst.  Formulate/define  func¬ 
tional  requirements  and  docu¬ 
mentation  based  on  accepted 
user  criteria.  Requirements:  Ba¬ 
chelor's  degree*  or  equivalent  in 
computer  science,  MIS,  engi¬ 
neering  or  related  field  plus  5 
years  of  experience  in  sys¬ 
tems/applications  development. 
Experience  with  J2EE,  Oracle 
databases  and  airline  schedul¬ 
ing  systems  also  required. 
‘Master's  degree  in  appropriate 
field  will  offset  2  years  of  gener¬ 
al  experience.  Submit  resumes 
to  Matt  Coplas,  FedEx  Corpor¬ 
ate  Services,  2955  Republican 
Drive,  2nd  Floor.  Memphis,  TN 
38118.  EOE  M/F/DA/. 


EdgeTech  Services,  Inc. 
is  seeking  GIS  Appli¬ 
cations  Developer.  GIS 
&  Remote  Sensing  ex¬ 
perienced  individuals  w/ 
BS  in  Computer  Sci¬ 
ence  please  respond 
with  resume  to:  141 
Peaked  Mountain  Road, 
Townshend,  VT  05353 
Attn:  Ms.  Hunt. 


System  Development  Analyst 
wanted  to  design  and  develop 
system  software  for  law  enforce¬ 
ment  agencies  with  emphasis 
on  systems  tools,  communica¬ 
tions  programming,  and  applica¬ 
tion  programming  using  VB,  VC, 
C++  &  related  language  or  sys¬ 
tems  and  SQL  Server  Database 
Administration.  Bachelor  degree 
in  Computer  Science  &  2  years 
of  experience  required.  Send 
resume  to  Law  Enforcement 
Support  Agency,  955  Tacoma 
Ave  S  .  Suite  101,  Tacoma,  WA 
98402. 


Computer  Professionals  (Mult¬ 
iple  Openings)  Software  Engin¬ 
eer/Programmer  Analyst/Syst¬ 
ems  Analyst/Database  Admini¬ 
strator/  Network  Administrator. 
Requirements  include:  US 
equivalent  to  a  Bachelor  or 
Master  Degree;  in  lieu  of  a 
Master's  Degree,  we  are  willing 
to  accept  a  Bachelor  Degree 
with  five  (5)  years  of  prior  pro¬ 
gressive  professional  experi¬ 
ence.  Must  also  have  experi¬ 
ence  in  some  of  the  following 
skills:  C/C++,  Java,  Cold  Fusion, 
Microsoft  Technologies  (Visual 
Basic,  .NET,  ASP)  CRM  (Siebel, 
Clarify,  Vantive),  Middleware 
Technologies  (ORBIX,  TIBCO, 
CORBA,  VITRIA),  Dataware 
Housing  Tools  (Informatica, 
DataStage,  Ablnitio,  Business 
Objects,  Cognos,  Micro  Stra¬ 
tegy,  Brio)  ERP  (SAP,  People 
Soft,  Oracle  Apps,  Baan) 
Mainframe  (COBOL,  CICS,  JCL, 
VSAM),  AS400,  Ecommerce, 
Databases  (SQL  Server,  Oracle 
DB2,  Sybase),  Windows  (95/ 
98/2000/NT/XP,  Exchange), 
UNIX  (Sun  Solaris/HP),  Linux 
and  QA  (Win  runner,  Load  run¬ 
ner,  SILK,  Quick  Pro,  Rational 
Tools,  Manual  Testing).  Exten¬ 
sive  Travel  and/or  relocation. 
Attractive  compensation  pack¬ 
age.  Mail  resume  to:  Human 
Resource  Director,  Reasonsoft, 
Inc.,  74  State  Road,  Ste.  203, 
Kittery,  ME  03904 _ 


Software  Engineers,  Program¬ 
mer  Analysts,  Systems  Analysts, 
need  for  VA  basedIT  firm.  Will 
need  Bach  +1  yr  exp  for  Jr.  Lev¬ 
el  positions  and  Masters  +1  yror 
Bach  +  5  yrs  of  exp  for  Sr.  Level 
position.  Various  skills  req:  Sta¬ 
tistical  software(SAS),  PERL, 
ERWIN,  C,  C++,  VC++,  iplanet, 
ASP,  DHTML,  Javascript,  Syb¬ 
ase,  Oracle,  SQLServer,  Busin¬ 
ess  Objects,  Crystal  Reports, 
Windows  NT,  IINUX,  IIS,  UN¬ 
IX,  Sun  Solaris,  CISCO,  PL/ 
SQL,  Cognos,  Brio,  Netscape 
enterprises  server, Cold  fusion, 
data  modelling,  informatica,  e- 
business  intelligence,  ties,  db2, 
peoplesoft,  jdedwards,  power 
builder,  CRM,  VB,  j2ee,  jsp, 
Jdbc,  ejb,  web  sphere,  weblog- 
ic,  Apply  with  2  copies  of  resume 
to  H.R.Dept,  Ling  Technologies 
2325,  Dulles  Corner  Blvd,  Suite 
500  Herndon,  Va  -  20155. 


Programmer  Analysts  for 
Naperville,  IL.  Design  &  Develop 
software  applications  using 
Oracle,  Erwin,  XML,  UML,  C++, 
Interwoven,  Coolgen,  Clear- 
Case,  ClearQuest,  PVCS,  UNIX; 
Bachelors  or  Equivalent  req'd  in 
Computers,  Engineering,  Math 
or  any  related  field  of  study  +  2 
yrs  of  related  exp.  40  hrs/wk. 
Must  have  proof  of  legal  author¬ 
ity  to  work  permanently  in  the 
U.S.  Send  resume  to  HR 
Manager,  Redsalsa  Techn¬ 
ologies,  Inc., 184  Shuman  Blvd, 
Suite#180,  Naperville  IL  60563. 


SAP  Business  Systems  Analyst. 
Thomson,  Inc.  is  seeking  an  SAP 
Business  Systems  Analyst  to 
consult  with  clients  regarding 
SAP  software  systems,  provide 
SAP  analysis,  redesign,  and  con¬ 
figuration  of  clients'  business 
procedures,  policies,  and  pro¬ 
cesses,  and  act  as  liaison  be¬ 
tween  the  application  developers 
and  the  business  community  to 
define  business  and  system 
requirements.  Must  have  4  years 
of  experience  in  SAP  consulting 
and  configuration.  Send  cover 
letter  and  resume  to:  Betty 
Moreno-Silva,  Manager,  Human 
Resources,  Thomson,  Inc.,  3233 
East  Mission  Oaks  Boulevard. 
Camarillo,  CA  93012  Please  ref¬ 
erence  Job  #AMM  in  your  cover 
letter. 


Unix  Administrator  required  to 
install,  configure,  update  and 
maintain  UNIX  (primarily  Sun 
Solaris)  servers  in  a  Windows 
environment,  troubleshooting 
system  problems  and  failures. 
Determine  and  implement  the 
requirements  for  hardware  and 
software  and  perform  related 
duties.  Bachelor  in  Computer 
Science  and  two  year  related 
experience  required.  Send 
resume  to  HR  (IT01),  Memphis 
Managed  Care  Corp.,  1407 
Union  Ave.,  Suite  200,  Memphis, 
TN  38104. 


Sr.  Software  Engineer. 
Customize  &  integrate  s/w 
components  from  3rd  party 
vendors  into  wireless  prod¬ 
ucts.  Bach's  deg  in  Comp 
Sci,  Physics  &  Elec  Engrg 
reqd  +  5  yrs  prog  exp  in 
specialty  field.  Snd  resume 
to  PMCDU,  1225  North¬ 
brook  Pkwy,  Suwanee,  GA 
30024,  Attn:  D.  Greer,  RK 


ProQuest,  one  of  largest  infor¬ 
mation  aggregators,  has  multi¬ 
ple  openings  for  Software  Engin¬ 
eers,  System/Programmer  An¬ 
alysts,  DBA  Candidates  must 
have  MS/BS  with  experience. 
We  offer  attractive  wage  with  full 
benefits.  Please  send  resumes 
to:  human_resources@il. proquest 
.com  EOE. 

System  Analyst  &  IT  staff  want¬ 
ed  by  Credit  Acceptance  Corp. 
Design  &  develop  ETL  process 
to  upload  data  from  OLTP  sys¬ 
tem  to  Star  Schema;  develop 
interface  process  to  transfer 
data  between  Loan  Servicing  & 
FACS;  use  Oracle,  SQL  Server, 
Crystal  Reports.  Please  contact 
hr@creditacceptance.com. 


Want  a  new 
IT  career? 


Check  out  our  jobs 
in  the  combined 
CareerJournal.com 
database. 


www.itcareers.com 


IndusRAD  seeks  engineers  &  IT 
staff  to  design  &  develop  appli¬ 
cation  software  for  Marine  en¬ 
gines  &  advanced  diesel  engine 
using  ANSI  C  program.  Write 
test  plan  &  procedures.  Must 
have  MS/BS  with  exp.  Good 
wage  with  benefits.  Please  send 
resume  to  info@indusrad.com. 
EOE. 

Ultimed  HMO  seeks  system 
analyst  to  develop  functional/ 
system  specifications  using  ob¬ 
ject  oriented  design  &  CASE 
tools,  program  in  VB,  VC++, 
Visual  FoxPro,  develop  ad-hoc 
reports  and  queries.  Applicants 
must  have  BS/MS  with  IT  exp. 
Please  contact  lactchson@ 
ultimed-hmo.com.  EOE. 


Software  Engineer,  Appli¬ 
cations.  BS  in  c.  sci,  eng  or 
rel.  field;  3  yrs  exp.  to 
include  Visual  Basic,  NET, 
SQL,  Crystal  or  T-SQL 
reporting,  Rational  Rose, 
Java,  C++,  UNIX;  demon¬ 
strated  communication, 
mentoring  &  documenta¬ 
tion  ability;  exp.  w/financial 
reports  &  concepts.  Send 
resume  to  Joanie  Bond, 
9001  Hickman  Rd.,  Ste 
340,  Urbandale,  IA  50322. 
EOE. 


Sr.  Applications  Programmer 
w/2  yrs  exp  in  using  SEI  CMM 
quality  control  standards,  full 
life  cycle  expertise  in  ADR 
securities,  cross-product  pro¬ 
cessing,  Power  Builder  with 
PFC,  Sybase  ASE,  Oracle, 
SQL  Anywhere,  Visual  Basic, 
Crystal  Reports,  Actuate, 
Unix,  Java,  web  component 
development,  Erwin,  Visual 
Source  Safe,  Clearcase,  Net¬ 
scape  Enterprise  Server.  Mail 
Res  to:  Open  Systems  Tech¬ 
nologies,  Inc.  8  Winter  Street, 
6th  Floor,  Boston,  MA  02108. 


Programmers  (Level-3):  Deve¬ 
lop  &  write  computer  programs 
for  web/client-server  software 
apps.  &  convert  project  specs,  in 
JD  Edwards  One  World, 
Microsoft  tech.,  Oracle  and 
Java/J2EE.  BS  in  Comp.  Sc.,  or 
rel.  field  &  2  yrs.  software  devel¬ 
opment  exp.  including  at  least 
12  months  exp.  in  job  offered 
required.  $50,200/Yr.  &  benefits. 
Mail  resume  to  Jann  Nielsen, 
Melaleuca,  Inc.,  3910  S. 
Yellowstone  Hwy.,  Idaho  Falls, 
ID  83402.  No  phone  calls 
please.  EOE. 


Web-Database  Administrator/ 
Programmer  Analyst.  Seeking 
quailified  candidates  possessing 
B.S.  or  equivalent  with  related 
work  experience  of  3  to  5  years. 
M-F  8am-5pm.  Duties:  Internet 
development,  design,  develop 
and  implement,  e-commerce 
application  using  COM,  COM+, 
MTS,  IIS,  HTML,  DHMTL,  Java 
Script,  Microsoft  and  Sun  Tech¬ 
nologies  with  database  Oracle 
8.1  &  MS  SQL  Server  2000  and 
MS-Access  2000.  Please  send 
resume  to  Angel  Diamond  Jew¬ 
elers  Company,  Attn:  Mr.Yaqim 
Lalani,  4800  Texoma  Pkwy,  Ste 
202,  Sherman  Tx  75090.  Email: 
y_lalani@hotmail.com. 


Software  Developer 

Analyze,  design  and  deploy 
customized  IT  applications  for 
the  mortgage  and  finance  in¬ 
dustry.  Must  have  Bachelors 
Degree  or  Foreign  Equiv.  in  CS 
or  Eng.  or  in  a  related  field  &  2 
yrs.  exp.  or2yrs.  exp.  in  a  relat¬ 
ed  position  w/ability  to  use:  C #, 
VB.Net,  VB,  ADO. Net  and 
ASP. Net  40.0  hrs./wk  8:00  AM  - 
6:00  PM.  Applicants  send 
cover  letter  and  resume  to: 
Cyber  Korp,  Inc., 400  West 
Lake  Street,  Suite  216,  Roselle 
IL  60172-3572,  Attn:  HR  MGR. 


Programmer  Analysts  to  ana¬ 
lyze,  design,  s/w  appls  using 
Java,  ASP,  Servlets,  JDBC, 
HTML,  Oracle,  PL/SQL,  Dev 
2000,  Forms,  Reports  Win¬ 
dows  OS;  design  web  pages 
dynamically  using  JavaScript; 
design  database  structure  using 
UML;  provide  on  site  mainte¬ 
nance  support,  debug,  modify, 
fine  tune  and  perform  code  opti¬ 
mization.  Require:  BS  or  For¬ 
eign  equiv  with  concentration  in 
CS/Science/Engg  (any  branch) 
with  2  yrs  exp  in  IT.  Competitive 
salary,  F/T  positions.  Travel 
involved.  Resume  to  IOR 
Technologies,  Inc.  2400  86th  st, 
Ste12,  Urbandale,  IA  50322.  Job 
ID  IORPA1104. 


Software  Developer 

Developing  and  programming 
large  scale  electronic  messag¬ 
ing  system  for  markets  in  China 
and  other  eastern  countries, 
researching  the  proper  technolo¬ 
gies  to  enhance  the  develop¬ 
ment  process,  and  providing 
prototypes  for  each  program  to 
be  coded  in  Java/NetBeans, 
C/C++,  JavaScript,  etc.  Req.  MS 
degree  in  CS  or  a  related  field 
and  proficiency  in  Java/Net- 
Beans,  C/C++,  JavaScript,  and 
XML.  Ability  to  understand  writ¬ 
ten  Chinese  or  other  eastern 
Asian  languages  also  required. 
40  hrs/wk.  Fax  resume  to 
Send2Fax,  LLC.  at  (843)  645- 
9501  or  email  hr@send2fax 
com. 
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Software  Segment  Leader 

For  Melbourne,  FL  employment.  2  openings  available.  40  hrs./wk. 
8:00am-5:00pm.  $65,000-$70,000/yr.  Requirements:  Bachelor's 
degree  in  Computer  Science  or  Electrical  Engineering.  3  yrs.  work  exp. 
applying  C++  &  OOA/OOD  techniques  to  the  development  of  large 
scale  software  systems,  including  Unix  platform.  3  yrs.  work  exp  that 
includes:  managing  &  planning  the  complete  software  lifecycle,  includ¬ 
ing  conducting  requirements  analysis  &  use  case  generation;  &  the 
domain  of  railroad  operations,  strategic  software  outsourcing  &  sub¬ 
contract  management.  Duties:  Software  system  engineering  for  the 
design  &  implementation  of  a  next  generation  railroad  dispatch  sys¬ 
tem.  Responsibilities  include  systems  &  software  engineering  tasks 
Systems  engineering  tasks  consist  of:  system  analysis,  including  cus¬ 
tomer  interface;  system  design;  specification  generation;  use  case 
development;  system  traceability  development;  &  development  of  a 
unified  model  for  train  dispatching  systems.  Software  engineering 
tasks  consist  of:  software  requirements  analysis;  architecture  imple¬ 
mentation;  software  analysis/design  (including  scenario,  interaction, 
sequence  &  state  diagrams);  &  implementation  of  a  train  dispatching 
system.  Work  closely  w/the  customer  &  software  engineers  in  develop¬ 
ing  &  tracking  system  &  subsystem  level  requirements,  developing  S 
maintaining  internal  &  external  interface  control  documents,  &  verify¬ 
ing  that  all  requirements  have  been  tested  successfully.  To  apply  send 
resume  to  Agency  for  Workforce  Innovation,  P.O.  Box  10869, 
Tallahassee,  FL  32302,  Re-JOFL  #  2566337  &  JOFL  #  2557471. 
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IT  CAREER  OPPORTUNITIES 

CALIFORNIA  -  (Corporate  HQ. 
Employment  is  throughout  US) 
Programmer  Analyst 
Sr.  Computer  Scientist 
Systems  Analyst 

MICHIGAN 
Programmer  Analyst 

NORTH  CAROLINA 
Database  Specialist 

Positions  require  a  BS  and  rele¬ 
vant  experience;  a  combination 
of  experience  and  college  level 
education  may  be  accepted.  The 
flexibility  to  travel  and  be  on-call 
may  be  necessary.  Proof  of  legal 
authorization  to  work  in  the  U.S. 
is  required.  Please  forward  your 
resume  to  Computer  Sciences 
Corp.,  Attn:  J.  Le,  2100  E.  Grand 
Ave.,  Mail  Code  A209,  El 
Segundo,  CA  90245.  Please 
indicate  the  specific  occupation 
and  location  for  which  you  are 
applying. 


SAP  Business  Intelligence 
company  seeks  experi¬ 
enced  SAP  functional/tech¬ 
nical  consultants  familiar 
with  generic  and  custom 
extractors,  data  modeling, 
info  sources  and  info  cubes. 
Also  seeking  SEM,  CRM 
and  SCM/APO  experience. 
Placements  throughout  US. 
Please  email  resume  to 
recruiting@  bisamerica.  com  or 
fax  to  305-675-0686. 


Seeking  qualified  candidates 
for  Sr.  &  mid-level  IT  profes¬ 
sional  positions  including: 
Programmer  Analysts,  Data¬ 
base  Administrators,  Software 
Engineers,  IT/Software  and 
similar  type  positions.  Candi¬ 
dates  must  possess  MS/BS  or 
equivalent  and/or  related 
work  experience.  Please  mail 
resume  and  references  to: 
Patel  Consultants  Corp. 

Attn:  HR 

1525  Morris  Ave. 

Union,  NJ  07085  eoe 


SW  Engin’rs:  Rsrch,  design 
&  test  RDBMS,  CRM,  Web/ 
Data  Warehouse  Info  mgt  sw 
appl’n  w /  JDK,  Cobol,  Vign¬ 
ette,  Oracle,  Sql  Server, 
Toad,  Dev’lpr  Suite,  Avaya, 
Lucent,  CTI,  Egain,  .net, 
MCMS,  ASP,  VB,  Bus.  Obj, 
Erwin,  C#,  XML,  WinRunner 
on  Unix/Windows.  40h/w,  8- 
5.  BS  in  Eng’g/Bus  field,  2yr 
wk  exp  in  job  or  any  posit’n 
w /  Vignette,  JDK,  Cobol. 
Resume  to  GBS  at  Chicago, 
reddytSlqenesisincorp.com 

fax:  317-579-1445. 
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■NET  or  Java/J2EE 
Application  Developers 

ThoughtWorks  is  a  global,  rapid¬ 
ly-growing  application  develop¬ 
ment  firm  looking  for  .NET  and 
Java/J2EE  developers  for  its 
Chicago,  Nashville,  New  York, 
and  San  Francisco  offices.  We 
build  highly  complex,  high  busi¬ 
ness  value  applications  for 
Global-1000  clients.  .NET/Java 
/J2EE  developers  must  have  a 
minimum  of  a  Master  of  Science 
degree  in  Computer  Sci,  Com¬ 
puter  Engineering,  Computer 
Info  Systems,  Elec  Engineering 
or  a  related  field.  Must  have  at 
least  6  mos  of  exp  ind  analysis, 
design,  coding  &  implementation 
of  large  scale,  complex  OO 
applications.  Must  be  open  to 
possible  extensive  travel. 

For  .NET  devs,  delivery  exp  on 
an  actual  C#/.NET  project  w / 
integration  w/3rd  party  applica¬ 
tions  &  non-Microsoft  technolo¬ 
gies  is  essential  &  development 
exp  using  Microsoft  languages  & 
tools,  such  as  COM+,  ASP.NET, 
ADO.NET,  Enterprise  Services, 
etc.  J2EE  devs  must  have  deliv¬ 
ery  exp  as  a  programmer,  ana¬ 
lyst  or  engineer  on  a  large-scale 
J2EE  application.  Exp  must  ind 
OO  design  &  design  patterns. 
Pis  E-mail  res  to: 
work@thoughtworks.com. 


.NET  or  Java/J2EE 
Application  Developers 

ThoughtWorks  is  a  global,  rapid¬ 
ly-growing  application  develop¬ 
ment  firm  looking  for  .NET  and 
Java/J2EE  developers  for  its 
Chicago,  Nashville,  New  York, 
and  San  Francisco  offices.  We 
build  highly  complex,  high  busi¬ 
ness  value  applications  for 
Global-1000  clients.  .NET/Java 
/J2EE  developers  must  have  a 
minimum  of  a  Bach  degree  in 
Computer  Sci,  Computer  Engin¬ 
eering,  Computer  Info  Systems, 
Elec  Engineering  or  a  related 
field.  Must  have  at  least  3  yrs  of 
exp  incl  analysis,  design,  coding 
&  implementation  of  large  scale, 
complex  OO  applications.  Must 
be  open  to  possible  extensive 
travel. 

For  .NET  devs,  delivery  exp  on 
an  actual  C#/.NET  project  w/in- 
tegration  w/3rd  party  applica¬ 
tions  &  non-Microsoft  technolo¬ 
gies  is  essential  &  must  have  at 
least  1 .5  yrs  of  development  exp 
using  Microsoft  languages  & 
tools,  such  as  COM+,  ASP.NET, 
ADO.NET,  Enterprise  Services, 
etc.  J2EE  devs  must  have  deliv¬ 
ery  exp  as  a  programmer,  ana¬ 
lyst  or  engineer  on  a  large-scale 
J2EE  application.  Exp  must 
incl  OO  design  &  design  pat¬ 
terns.  Pis  E-mail  res  to: 
work@thoughtworks.com. 


Infosys  Technologies  Ltd, 
a  world  leader  in  soft¬ 
ware  consulting  seeks 
qualified  candidates  at 
our  offices  in  Quincy,  MA; 
Fremont,  CA;  &  Lisle,  IL: 
Bus  Dev  Mgr,  Bus  Dev 
Consul,  Bus  Sys  Anal, 
Proj  Lead,  Sr  Sys  Anal,  & 
Prog/Sys  Anal.  Contact: 
HR,  INFY  Two  Adams  PI, 
Quincy,  MA  02169  or: 
careers_usa@infy.com. 

WWW.lnfy.com 


Cityon  Systems  has  openings 
in  Plano,  TX  &  other  locations 
throughout  the  US  for  pro¬ 
grammer  analysts,  software 
engineers,  DBA's  with  work¬ 
ing  knowledge  in:  INFORMIX, 
UNIX,  SAP  4.6c  &  4.7,  BAPI, 
ABAP/4,  MicroStrategy,  7i, 
Oracle  8i,  PowerBuilder,  or 
Peoplesoft  8.x.  Bachelor's  in 
CS,  Engineering,  Math  or 
related  &  2  years  exp.  req'd. 
Excellent  benefits.  Send  con¬ 
fidential  resume  to:  HR, 
Cityon  Systems,  2000  N. 
Central  Expy,  Ste.  115,  Plano, 
TX  75074. 


Computer  Scientist 

Responsible  for  R&D  of  hard¬ 
ware  &  software  formal  verifica¬ 
tion  framework.  Duties  include 
design  &  implementation  of  for¬ 
mal  specification  language,  new 
automated  verification  algo¬ 
rithms;  overall  system  infrastruc¬ 
ture;  perform  research  in  formal 
methods  area;  write  research 
papers  &  technical  reports.  This 
position  requires  Ph  D.  in  CS 
with  doctoral  dissertation  em¬ 
phasis  in  software  engineering  & 
formal  methods  for  analysis  & 
verification  of  software  &  hard¬ 
ware  systems.  Research  back¬ 
ground  to  include:  design,  imple¬ 
mentation;  use  of  model  check¬ 
ers,  static  analyzers,  compilers; 
software  verification;  implemen¬ 
tation  &  design  skills  including 
object  technology;  programming 
skills  including  C++,  Scheme, 
Emacs-Lisp,  &  Java;  working 
knowledge  of  automatic  theorem 
proving  &  formal  semantics  of 
programming  languages.  This 
position  is  located  in  Menlo 
Park,  CA.  Please  apply,  indicat¬ 
ing  job#  2251 ,  via  our  website  @ 
www.sri.com  or  mailing  address 
at  333  Ravenswood  Ave,  Menlo 
Park,  CA  94025.  Attn:  Employ¬ 
ment  Dept.  EOE/AA 


Engineer,  Senior  Software  - 
Speech  Recognition  Applica¬ 
tions:  Develop,  improve  and 
maintain  human-computer  inter¬ 
face  software  for  medical  appli¬ 
cations.  Requires:  Master  s  or 
Ph.D.  degree  in  CS,  EE, 
Computational  Linguistics  or 
equiv.  plus  2  yrs.  exp.  as  Sr.  S/W 
Eng.  -  SR,  or  Research  Assi¬ 
stant,  Speech  Scientist,  Engi¬ 
neer,  or  equiv.  working  in  indus¬ 
trial  s/w  development  environ¬ 
ment;  strong  coding  skills  in 
C/C++;  strong  speech  recogni¬ 
tion  exp.  using  HMM  approach; 
comfort  with  multiple  platforms, 
especially  Linux  and  Windows; 
excellent  writing  and  verbal 
skills;  embedded  programming 
experience;  signal  processing 
knowledge.  F/T. 

Must  be  able  to  work  without 
employer  sponsorship.  Send 
resume  to:  Karl  Storz  Imaging, 
Attn:  HR.  CW1104,  175 

Cremona  Dr.,  Goleta  CA  93117 
or  email  to 

jobs@ksimaging.com.  EOE. 
M/F/V/D.  Principals  only. 


A  position  is  available  for  a  Soft¬ 
ware  Engineer  in  Columbus, 
Ohio  with  a  software  developer 
and  supplier.  The  Software  En¬ 
gineer  will  be  primarily  responsi¬ 
ble  for  product  design,  bug  veri¬ 
fication,  release  testing,  and 
beta  support  projects  for  finan¬ 
cial  and  accounting  software 
which  may  require  research  and 
analysis.  Candidates  for  this  po¬ 
sition  should  possess  a  Bachel¬ 
or's  degree  in  business,  soft¬ 
ware  engineering  or  computer 
science;  at  least  1  year's  experi¬ 
ence  developing  financial  soft¬ 
ware  applications;  and  demon¬ 
strated  knowledge  of  manage¬ 
ment  information  systems,  sys¬ 
tems  analysis  and  design, 
accounting,  finance,  and  opera¬ 
tions  management.  Apply  by 
mail  to:  James  Lenard,  Mapics 
Inc.,  2800  Corporate  Exchange 
Drive,  Columbus,  Ohio  43231 . 


Satya  Marg  Solutions  Inc,  Lon¬ 
donderry,  NH  needs  experi¬ 
enced  programmer  Analysts 
having  a  Bachelors  Degree  or 
equivalent  with  two  years  of 
progressive  work  experience  in 
client  server  technologies,  de¬ 
veloping  software  applications 
using  Oracle,  SQL  Server, 
VC++,  VB,  ASP,  Developer 
2000  and  Java.  Knowledge  of 
Microsoft.Net  technologies  is  a 
plus.  40  hour  week,  M-F,  com¬ 
petitive  salary  and  benefits, 
apply  with  resume  to  Satya 
marg  Solutions  Inc.,  Hr  Depart¬ 
ment,  75  Gilcreast  Rd,  Suite 
200,  Londondery,  NH  03053  or 
email:  HR@smsolutionsinc.com 


IT  PROFESSIONALS,  BUSI¬ 
NESS  DEVELOPMENT  MAN¬ 
AGERS  AND  FINANCIAL  PRO¬ 
FESSIONALS 

Majesco  Software,  Inc.,  a  lead¬ 
ing  software  consulting  compa¬ 
ny,  seeks  computer  profession¬ 
als,  IT  Business  Development 
Managers,  and  financial  profes¬ 
sionals/accountant.  For  our 
computer-related  positions,  we 
are  seeking  Programmer/ 
Analysts,  Systems  Analysts/ 
Business  Systems  Analysts, 
Network  Engineers  and 
Software  Engineers.  Technical 
positions  require  a  Bachelor's 
degree  or  higher  in  a  related 
field  and/or  relevant  industry 
experience.  We  are  also  recruit¬ 
ing  for  IT  Business  Development 
and  Account  Managers  to  man¬ 
age  existing  accounts  and  all 
aspects  of  sales/business  devel¬ 
opment  for  the  company’s  U.  S. 
operations.  These  positions 
require  at  least  a  bachelor's 
degree  in  either  a  technical  field 
or  a  business-related  field  and 
experience  in  related  positions 
such  as  IT  Account  Mgr.  Or 
Sales/IT  Mgr.  We  also  need 
financial  expert/accountant  with 
computer  systems  experience. 
All  positions  are  subject  to  relo¬ 
cation  to  various  sites  through¬ 
out  the  United  States.  Qualified 
applicants  respond  by  mail  to: 
HR  Department,  Majesco 
Software,  Inc.,  2035  Lincoln 
Highway,  Suite  3002,  Edison,  NJ 
08817.  Please  specify  position 
applying  for  on  envelope 


Software  Engineer.  Design  and 
implement  SQL  and  Perl  scripts- 
based  components  needed  to 
provide  access  and  manipula¬ 
tion  of  data  in  various  data  marts 
and  enterprise  data  warehous¬ 
es.  Document  all  design  and 
development  efforts  for  long 
term  support;  hold  overall 
responsibility  for  component  and 
work  on  project  architecture  to 
assure  design  and  implementa¬ 
tion  are  consistent  with  other 
parts  of  existing  project  and 
vision  for  future  projects.  Utilize 
UML  tools  to  design  solutions 
and  document  designs  for  oth¬ 
ers;  test  components  to  test  har¬ 
ness  level,  including  unit  testing 
and  reproducible  automatic 
mechanism  to  validate.  BS  in 
Computer  Science  or  related 
discipline  and  4  yrs  experience 
in  software  development  or  data 
warehousing,  including  Java, 
Java  Beans  and  SML  required. 
8:00-4:45  $82,000/yr.  Please 
submit  resume  to:  Employment 
Security  Commission.  3351  Carl 
Sandburg  Ct.,  Raleigh,  NC 
27610.  Resume  must  include 
applicant's  SS#,  Job  Order 
#NC7251828  and  DOT  code 
#030.062-010. 


Structured  systems  analysis,  de¬ 
sign,  development,  testing,  qual¬ 
ity  assurance,  implementation, 
integration,  maintenance  and 
support  of  integrated  client-serv¬ 
er  based  systems  for  business, 
financial,  banking,  manufactur¬ 
ing  and  other  commercial  busi¬ 
ness  application  systems  in  a 
multi-hardware/multi-software 
environment  using  centralized  or 
distributed  relational  database 
management  systems,  4GLs 
(Fourth  Generation  Languages) 
and  other  GUI  (Graphical  User 
Interface)  front-end  tools.  An¬ 
alysis,  design  and  development 
of  client-server  applications  us¬ 
ing  object-oriented  methodolo¬ 
gy.  Bachelor's  Degree  (or  equiv¬ 
alent)  in  Computer  Science- 
Math/Engineering/Science/Busi 
ness-Commerce  and  1  yr.  expe¬ 
rience  in  job  offered  or  as  Soft¬ 
ware  Engineer/Systems  Analyst 
are  required.  Must  have  appro¬ 
priate  combination  of  skills  as 
follows:  1  of  A  and  2  of  B;  or  2  of 
A  and  1  of  B;  or  3  of  A.  A  in¬ 
cludes  Oracle,  Sybase,  Informix, 
SQL  Server,  Progress,  Ingres, 
Access  and  Proxy  Server;  and  B 
includes  PowerBuilder.  Visual 
Basic,  MS-Windows,  Visual 
C++,  JAM,  APT-SQL.  SQL‘- 
FORMS,  ESQL/C,  GUPTA  SQL, 
Progress  4GL,  Informix  4GL,  In¬ 
gres  4GL,  C,  Java,  Lotus  Notes, 
HTML,  CGI.  IIS,  ASP,  Front 
Page,  Perl  and  Java  Develop¬ 
ment  Kit  (JDK);  High  mobility 
preferred.  40  hrs/week.  8  am  -  5 
pm.  $66,533  -  $78,000  per  year. 
Qualified  applicants  should  con¬ 
tact  or  send  resume  to: 
Armstrong  County  CareerLink, 
ATTN.  CL  Program  Supervisor, 
1270  North  Water  Street,  PO 
Box  759.  Kittanning,  PA  16201- 
0759.  Refer  to  Job  Order  #  WEB 
466922 


Computer  Scientist 

Responsible  for  performing  ba¬ 
sic  research  in  intelligent  agent 
systems  8  applying  the  results 
to  challenging  real-world  prob¬ 
lems.  Responsibilities  will  in¬ 
clude  managing  maintenance  & 
extension  of  existing  BDI  (Belief 
Desire  Intention)  agent  software 
&  leading  research  efforts  in  the 
area  of  robustness  for  agent 
systems  Requires  PhD  in  com¬ 
puter  science  with  doctoral  re¬ 
search  &  dissertation  emphasis 
in  BDI  agent  systems  plus  five 
years  experience  in  the  applica¬ 
tion  of  BDI  agent  systems  to 
real-world  problems  Requires 
publication  record  in  BDI  sys¬ 
tems  Background  must  include 
theoretical  foundations  of  BDI 
agent  systems;  programming  in 
Prolog,  Python,  Java,  and  Lisp; 
software  engineering  project 
leadership  experience  This 
position  is  located  in  Menlo 
Park.  CA.  Please  apply,  indicat¬ 
ing  job#  2263,  via  our  website  @ 
www.sn.com  or  mailing  address 
at  333  Ravenswood  Ave,  Menlo 
Park,  CA  94025  Attn:  Employ¬ 
ment  Dept.  EOE/AA. 
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AT  A  GLANCE 


What’s  happening:  Some  enterprise  software  customers  said 
they’re  receiving  letters  from  software  vendors  requesting  that  they 
conduct  self-audits  of  their  software  use  in  order  to  help  the  vendors 
comply  with  requirements  under  the  Sarbanes-Oxley  Act  of  2002. 

Why  it  matters:  Some  IT  managers  believe  the  letter  campaign  is 
merely  a  ruse  to  get  customers  to  increase  their  software  audits. 


Continued  from  page  1 

Audit 

Interwoven  that  it  was  in  com¬ 
pliance  with  the  TeamSite  li¬ 
censing  agreement,  the  pur¬ 
chasing  manager  added.  A 
spokesman  for  Interwoven 
said  the  company  wouldn’t 
comment  on  whether  it  was 
sending  such  letters  to  cus¬ 
tomers. 

The  financial  services  firm 
isn’t  alone.  Lawrence  A. 
Husick,  a  partner  at  Lipton, 
Weinberger  &  Husick,  an  in¬ 
tellectual  property  law  firm  in 
Malvern,  Pa.,  said  he  has  been 
contacted  by  several  clients 
recently  who  have  received 
similar  letters  from  software 
vendors  that  he  declined  to 
identify,  except  to  call  them 
“the  usual  suspects.” 

Husick  said  he  doesn’t  be¬ 


lieve  that  the  letters  represent 
an  honest  effort  among  ven¬ 
dors  to  meet  Sarbanes-Oxley 
regulatory  requirements  —  a 
sentiment  shared  by  several  IT 
asset  managers  attending  the 
conference. 

“Vendors  will  use  every  tool 
they  have  at  their  disposal  to 
increase  revenues  —  they’re 
not  doing  this  for  their  own 
[Sarbanes-Oxley]  compliance 
requirements,”  he  added. 

Vendor  Defense 

Jenny  Schuchert,  vice  presi¬ 
dent  of  program  development 
at  Akron,  Ohio-based  Inter¬ 
national  Association  of  IT  As¬ 
set  Managers  Inc.  (IAITAM), 
disagreed. 

Schuchert  said  she  hadn’t 
previously  heard  about  the  let¬ 
ters  but  wouldn’t  be  surprised 
if  software  vendors  were  mail¬ 
ing  them  out.  Many  software 


vendors  have  poor  record¬ 
keeping  procedures  and  may 
need  customers  to  conduct 
self-audits  so  the  vendors  can 
attest  to  the  financial  controls 
that  support  their  sales  activi¬ 
ties,  she  noted. 

“Regulators  are  on  [ven¬ 
dors]  to  track  their  revenues, 
when  the  customer  contracts 
were  started,  the  size  of  the 
deals,  etc.,”  added  Schuchert. 

Barbara  Rembiesa,  presi¬ 
dent  of  the  IAITAM,  the  user 
group  that  sponsored  the 
conference,  said  she  spoke 


with  “a  few”  attendees  there 
who  have  received  Sarbanes- 
Oxley-related  self-audit  re¬ 
quests  from  software  vendors. 
“Publishers  can  request  self¬ 
audits  anytime,  and  they’re 
within  their  rights  to  do  it,” 
she  said. 

But  several  conference  at¬ 
tendees  said  they  were  irked 
by  the  approach,  even  though 
their  organizations  haven’t  re¬ 
ceived  such  correspondence. 

“I  think  [software  vendors]  are 
doing  this  to  get  more  people 
to  conduct  audits.  It’s  bogus,” 


said  an  IT  asset  manager  at  a 
large  financial  services  firm 
in  the  Northeast  who  request¬ 
ed  anonymity. 

Rod  Anderson,  a  spokesman 
for  Novell  Inc.  in  Waltham, 
Mass.,  said  the  company  has 
been  sending  letters  to  cus¬ 
tomers  “for  a  number  of 
years”  requesting  that  they 
conduct  self-audits.  However, 
he  said,  Novell  hasn’t  sent  cus¬ 
tomers  any  letters  containing 
references  to  Sarbanes-Oxley. 

A  spokeswoman  for  Oracle 
Corp.  said  the  vendor  hasn’t 
sent  users  such  letters.  Spokes¬ 
men  for  IBM  and  Microsoft 
Corp.  declined  to  comment  for 
this  story.  O  50414 


MORE  ASSET  MANAGEMENT 

Barbara  Rembiesa  of  the  IAITAM  talks 
about  Sarb-Ox  and  licensing  issues: 
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Microsoft  LCS  Security  Features 
Drive  Interest  in  Corporate  IM 

Will  enable  users  of  popular  messaging 
systems  to  communicate  more  safely 


BY  TODD  R.  WEISS 

Microsoft  Corp.’s  new  Live 
Communications  Server 
(LCS)  2005  could  prove  to  be 
a  crucial  ingredient  in  the 
spread  of  corporate  instant 
messaging  use,  some  users 
and  analysts  say. 

The  offering,  which  is  com¬ 
patible  with  most  popular  IM 
systems,  has  corporate  users 
and  vendors  eyeing  new  op¬ 
portunities  for  more-secure 
messaging. 

Taylor  Collyer,  director  of 
server  marketing  at  Microsoft, 
said  that  when  used  with  a 
special  connectivity  pack,  LCS 
will  allow  more-secure  interac¬ 
tion  with  users  running  Yahoo 
Inc.’s  Yahoo  Messenger,  Amer¬ 
ica  Online  Inc.’s  Instant  Mes¬ 
senger  and  Microsoft’s  MSN 
Messenger.  Those  IM  commu¬ 


nications  will  be  enabled  in  se¬ 
cure,  encrypted  messages,  per¬ 
mitting  LCS  users  to  more 
safely  communicate  with  users 
of  the  popular  free  IM  clients. 
That’s  important,  Collyer  said, 
because  “people  don’t  want 
corporate  secrets  leaking  out 
the  back  door.” 

LCS  is  due  to  ship  in  De¬ 
cember.  In  2005,  Microsoft  will 
release  a  new  IM  client,  code- 
named  Istanbul,  that  will  be 
the  preferred  client  for  LCS. 

Graham  Lawlor,  chairman  of 
the  New  York-based  Financial 
Services  Instant  Messaging 
Association  (FIMA)  and  pro¬ 
gram  manager  of  IM  at  New 
York-based  Deutsche  Bank,  a 
heavy  user  of  secure  enter¬ 
prise  IM,  said  the  interoper¬ 
ability  promised  by  LCS  2005 
is  a  “pretty  fundamental 


change  in  the  industry,  espe¬ 
cially  coming  from  a  company 
like  Microsoft.” 

It  will  allow  the  broad  user 
base  of  the  free  IM  communi¬ 
ty  to  take  advantage  of  the 
“richness  of  enterprise  IM,” 
which  offers  more  security 
and  usability  than  free  IM 
clients,  Lawlor  said. 

FIMA  was  created  in  2002  to 
pressure  vendors  into  stan¬ 
dardizing  IM  software  to  meet 
compatibility,  security  and  oth- 


Enterprise 
IM  Benefits 

Companies  choose  to  buy 
IM  systems  instead  of  using 
free  alternatives  in  order  to 
get  the  following  features: 

Message  logging 

■  Network  security 

■  Regulatory  compliance 

■  Management  control 


er  business  IT  needs  [Quick- 
Link  33724].  The  FIMA  lineup 
includes  Bank  of  America,  Citi¬ 
group,  Credit  Suisse  First 
Boston,  Deutsche  Bank,  J.R 
Morgan  Chase  &  Co.,  Lehman 
Brothers  Inc.,  Merrill  Lynch  & 
Co.,  Prudential  Securities  Inc. 
and  UBS  Warburg  LLC. 

Some  FIMA  members  have 
been  beta-testing  LCS  2005, 
Lawlor  said,  and  most  are  at 
least  investigating  the  product 
for  possible  use. 

Mike  Miller,  director  of  sup¬ 
port  services  for  newspaper 
and  television  conglomerate 
Media  General  Inc.  in  Rich¬ 
mond,  Va.,  said  IM  use  at  his 
company  is  still  light;  only 
about  100  out  of  some  8,000 
workers  use  an  IT-endorsed 
system.  Those  workers  use 
the  free  AOL  IM  client,  with 
added  security,  logging,  man¬ 
agement  and  control  features 
provided  by  Waltham,  Mass.- 
based  IMlogic  Inc.’s  IM  Man¬ 
ager  software. 

Media  General  has  looked 
at  enterprise  IM  systems,  but 
company  officials  agreed  that 
there’s  no  need  to  act  until  user 
numbers  grow,  Miller  said. 


Genelle  Hung,  an  analyst  at 
The  Radicati  Group  Inc.  in 
Palo  Alto,  Calif.,  said  corpo¬ 
rate  interest  in  IM  is  due,  in 
some  cases,  to  the  technolo¬ 
gy’s  “presence”  feature,  which 
enables  users  to  see  who  is 
available  and  online.  “It’s  defi¬ 
nitely  picking  up  in  terms  of 
enterprise  IM,”  Hung  said. 
Some  companies  are  still  not 
ready  for  enterprise  IM  pack¬ 
ages,  though,  and  are  using  the 
free  IM  clients  along  with 
management  tools  from  ven¬ 
dors  like  IMlogic,  Akonix  Sys¬ 
tems  Inc.  and  FaceTime  Com¬ 
munications  Inc.,  she  said. 

Joe  Wilcox,  an  analyst  at 
Jupiter  Research  in  New  York, 
said  corporate  interest  in  en¬ 
terprise  IM  has  grown  be¬ 
cause  of  regulatory  require¬ 
ments  for  message  logging 
and  concerns  that  public  IM 
networks  are  unsafe.  “For 
some  retailers,  I  wouldn’t  say 
it’s  must-have,”  Wilcox  said. 
“But  where  there  are  people 
sitting  at  desks  and  co-work¬ 
ers  are  on  another  floor  or 
in  another  city . . .  the  must- 
have  increases  dramatically.” 

O  50413 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Offshore  Dot-Bomb 


WHY  ARE  WE  OFFSHORING  IT?  I’ve  puzzled  over 

that  question  ever  since  I  spent  a  day  last  month 
at  a  conference  for  lawyers  on  IT  offshoring.  The 
lawyers,  of  course,  were  focused  on  how  to  write 
good  outsourcing  contracts  —  struggling  to  fig¬ 
ure  out  how  to  deal  with  foreign  laws,  privacy,  security,  due  dili¬ 
gence  and  all  the  other  unfamiliar  complications  offshoring  brings. 

But  why  go  to  all  this  effort  for  something  that,  for  corporate  IT  at 
least,  is  really  untried,  uncertain  terra  incognita?  And  it  finally  hit 
me:  IT  offshoring  agreements  aren’t  being  done  as  conventional 
business  deals  on  the  usual  business  basis. 

They’re  being  done  on  faith.  It’s  like  dot-com  mania  all  over  again. 


Don’t  laugh.  True,  there’s  none  of  the  dot¬ 
com  hoopla  here.  These  days,  most  companies 
won’t  even  talk  publicly  about  their  offshoring. 

But  they’re  doing  it.  And  as  with  the  rush  to 
Web  commerce,  there’s  more  faith  than  fact 
driving  the  march  to  outsource  —  even  though 
the  numbers,  the  expertise  and  the  experience 
aren’t  there  to  justify  that  faith. 

With  the  dot-coms,  we  didn’t  know  whether 
a  Web-based  business  model  would  work  at  all 
—  or  if  it  did,  what  kinds  of  businesses  it  would 
support.  We  didn’t  know  how  fast  business  could 
shift  to  the  Web,  or  whether  dot-coms  really 
could  transform  retailing.  All  we  knew  was  that 
bits  cost  less  than  bricks,  so  we  figured  every¬ 
thing  else  must  cost  less  on  the  Internet,  too. 

A  scrap  of  data,  an  untried  business  model 
and  a  lot  of  faith:  That  was  the  dot-com  way, 
and  we  all  chased  it. 

And  offshoring?  We  know  offshore  program¬ 
mers  get  paid  less  —  they’re  the  bits-cheaper- 
than-bricks  part  of  the  scheme. 

But  we  don’t  know  what  kinds  of  corporate 
IT  projects  can  be  effectively  off¬ 
shored.  Or  what  happens  to  quality 
levels  as  offshoring  volume  ramps 
up.  Or  whether  outsourcing  will 
leave  us  with  the  flexibility  and 
agility  to  adjust  to  rapidly  changing 
business  conditions,  take  advantage 
of  new  market  opportunities  and 
quickly  respond  to  new  user  needs. 

We  don’t  even  know  if  we’d  all 
be  better  off  leaving  offshoring  be¬ 
hind  in  favor  of  component  devel¬ 
opment,  packaged  applications  and 
improved  management  tools. 

We  just  don’t  have  the  experience 


to  tell  us  those  things.  Or  the  expertise  to 
choose  the  right  projects  to  outsource  and  then 
successfully  manage  from  half  a  world  away.  Or 
the  project  results  —  the  hard  numbers  —  to 
give  us  confidence  in  the  decision  to  outsource. 

Then  why  all  the  IT  outsourcing?  It’s  faith, 
not  fact,  that  drives  it:  the  faith  of  CEOs,  CFOs 
and  CIOs  that  there  has  got  to  be  a  better  way 
to  do  IT,  and  offshoring  might  be  it. 

Which  explains  why,  as  I  learned  at  that  con¬ 
ference,  even  though  roughly  half  of  offshoring 
projects  fail,  customers  don’t  bail.  Instead,  they 
renegotiate  their  deals.  They  have  faith,  and  off¬ 
shoring  gets  a  second  chance. 

It  explains  why  cultural  and  legal  quirks  get 
forgiven,  complications  are  accepted  and  extra 
overhead  —  such  as  the  cost  of  getting  and 
keeping  lawyers  up  to  speed  on  how  to  write 
offshore  outsourcing  contracts  —  is  taken  in 
stride.  Sure,  these  might  be  permanent  prob¬ 
lems  that  will  get  worse.  But  they  might  just  be 
teething  pains  that  will  work  themselves  out. 

Most  of  all,  it  explains  why  offshoring  seems  to 
march  on  regardless  of  logic  or  prac¬ 
tical  considerations  or  early  results. 

Yes,  that  bubble  of  faith  in  off¬ 
shoring  will  burst  eventually. 

When  that  happens,  as  with  the 
dot-coms,  some  offshoring  ap¬ 
proaches  will  disappear  and  some 
will  survive.  Experience  will  let  us 
sort  it  all  out,  and  the  offshoring 
that  survives  will  seem  a  lot  more 
sensible  in  hindsight. 

But  until  then,  all  we  can  do  is 
struggle  to  figure  it  out  —  and 
hope  we  survive  this  offshoring  act 
of  faith.  O  50376 


frank  hayes.  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frankhayesScomputerworid. 


Right  on  Schedule 

Every  time  there’s  a  major  change  on  the  mainframe, 
this  user  complains  that  the  change  has  broken  one 
of  his  programs.  “We’re  told  to  just  fix  it,  even  when 
we’re  certain  it  never  ran,”  says  systems  programmer 
pilot  fish.  Then  comes  the  day  when  a  scheduled 
change  is  delayed  at  the  last  minute  -  but  the  user’s 
broken-program  complaint  comes  in  on  schedule.  "I 
told  our  boss  with  a  maniacal  snicker,”  fish  says.  “Nev¬ 
er  heard  a  problem  from  that  user  again.” 


SHARK 

TANK* 


Oops! 

School  principal 
sends  an  urgent 
message  to  a 
power-user  pilot 
fish:  “Help!  I’ve  got  are- 
port  to  get  out,  and  the 
dot-matrix  printer  keeps 
printing  on  the  same  line 
over  and  over.”  Fish  ar¬ 
rives  and  surveys  the  sit¬ 
uation.  Who  hooked  this 
printer  up  the  first  time, 
when  it  worked?  he 
asks.  “The  IT  guys,” 
principal  says.  And  who 
hooked  it  up  the  second 
time,  when  it  didn’t? 
Principal:  “I  did.”  Rsh: 
And  who  placed  it  direct¬ 
ly  on  top  of  the  stack  of 
fanfold  paper  it’s  sup¬ 
posed  to  use? 

Trust 

For  the  new  order-entry 
system  at  this  paper 
company,  programmer 
pilot  fish  is  repeatedly 
told  that  the  company 
sells  rolls  as  either  stock 
or  make-to-order,  but 
sheets  only  as  stock.  No 
make-to-order  sheets? 
fish  keeps  asking  -  until 
the  product  vice  presi¬ 
dent  stands  up  at  a 
meeting  and  roars,  “We 
will  not  make  make-to- 
order  sheets!”  System 
goes  live.  “And  the  very 
first  order  is  for  make- 
to-order  sheets,”  sighs 
fish.  “Fortunately,  the 
order  processed  without 
problems  because  we 


never  believed 
him  in  the  first 
place.” 


Foresight 

Helpful  user  brings  his 
old  Zip  drive,  complete 
with  all  its  cables,  to  IT 
manager  pilot  fish.  “I 
don’t  have  a  need  for 
this  anymore,”  user 
says.  “Would  you  like 
it?”  Sure,  says  fish,  we’ll 
keep  it  in  case  someone 
else  needs  it.  How  many 
Zip  disks  do  you  have  to 
go  with  it?  “Several” 
says  user,  “but  I  need  to 
keep  them  - 1  have  im¬ 
portant  information 
saved  on  them.” 

Efficiency 

When  a  new  application 
rolls  out  to  all  this  com¬ 
pany’s  call  centers,  one 
site  reports  problems 
with  it  every  day  at 
around  4  p.m.  Why  just 
this  site,  and  only  at  4 
p.m.?  IT  pilot  fish  won¬ 
ders.  “When  the  report¬ 
ing  user  was  contacted, 
she  swore  the  problem 
was  ongoing  and  affect¬ 
ing  multiple  users,”  says 
nsric  risn  investigates 
and  discovers  that  this 
user  has  been  appointed 
“oroblem  chamoion”  to 
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coordinate  reporting  of 
problems.  “She  was 
writing  down  all  the  indi¬ 
vidual  problems,”  fish 
says,  “and  then  report¬ 
ing  them  once  a  day.” 


O  REPORT  IT  TO  SHARKY.  Tell  me  your  true  tale  of  IT 
life  at  sharky@computerworld.com.  You  get  a  stylish 
Shark  shirt  if  I  use  it.  And  check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  for  Shark  Tank  home  delivery  at 
computerworid.com/sharky. 
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Seeking  to  align  IT  with  business  goals? 
Need  to  deliver  business  services  faster? 

Want  a  way  to  bring  it  all  together? 


Let  BEA  show  you  how  to  integrate 
your  business  processes  through 
Service-Oriented  Architecture. 


And  find  out  how  SOA  ready  your  company  is  with  a 
complimentary  soa  readiness  assessment  Benchmark  Report. 


SOA  for  faster  delivery 


You’ve  heard  the  industry  buzz  about 
Service-Oriented  Architecture. 

How  this  software  design  approach  can  greatly  reduce  the 
costs,  time,  and  risks  of  business  integration  projects.  How 
research  shows  that  75%  of  large  enterprises  will  begin  a 
Service-Oriented  Architecture  (SOA)  implementation  by 
2006.  And  how  the  world's  leading  companies  are  already 
planning  SOA  deployments  to: 

■Rapidly  implement  new  services  without  expensive  development 
■Reduce  process  complexity  and  leverage  existing  investments 
•Adapt  faster  to  changing  needs 


BEA:the  choice  for  SOA. 

BEA  is  a  world  leader  in  enterprise 
application  infrastructure  software, 
makers  of  the  first  and  only  integrated 
platform  for  application  development  and 
integration. The  BEAWebLogic  Platform 
is  a  superior  framework  for  SOA  that 
streamlines  the  process  of  integrating 
business  applications  to  more  closely 
align  IT  with  business  objectives. 

So  you  can: 


■Seamlessly  connect  people  and  business  applications  together 

But  how  do  you  evaluate  your  SOA  options?  Who  can  help  you  develop 
a  plan?  What  benefits  can  you  expect  -  and  how  soon  can  you  expect 
them?  Get  answers  and  insights  -  including  your  own  SOA  Readiness 
Assessment  Benchmark  Report  -  at  http://soa.bea.com/cwnov. 


SOA  ON  BEA 


■  FASTER  DELIVERY.  Virgin  Mobile  USA  turned  to  BEA 
Web  Logic  Platform™  to  launch  the  nation’s  first  wireless  service 
targeted  to  the  youth  market.  Using  SOA  to  deliver  a  self-service 
customer  portal,  Virgin  Mobile  launched  its  prepaid  wireless  service 
in  seven  months. 


.  Build  and  deploy  self-service  portals  faster 

.  Leverage  reusable  components  for  speed 
and  efficiency 

.  Avoid  trade-offs  between  urgent  business 
needs  and  long-term  flexibility 

BEA  is  a  leader  in  enterprise  application 

infrastructure.  Here’s  why: 

.  Superior  open-standards  platform  for  SOA 

.  15,000  customers,  including  a  majority  of  the 
Fortune  Global  500 

.  Partner  for  1,300  leading  hardware  makers, 
ISVs,  Sis,  and  VARs 

.  Business  Integration  Journal's  2004  Vendor 
of  the  Year 
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of  business  services. 


Ready  for  SOA?  Find  out 
how  ready  you  really  are. 

Ready  to  reap  the  benefits  of  SOA? 

Now  you  can  find  out  how  ready  you 


Plan  with  confidence. 
Deploy  with  speed. 

Using  BEA  for  SOA  based  business 
integration  delivers  proven  benefits: 


really  are.  Using  our  SOA  Readiness  „  Increased  responsiveness:  faster  integration 

Assessment,  you  can  see  where  your  lets  you  deliver  business  services  faster 


company  ranks  compared  to  industry 
averages  and  to  your  own  peers.  Just 
complete  the  online  questionnaire  and 
within  24  hours,  well  send  you  back  a 


■  Lower  risk:  open-standards-based  framework 
frees  you  from  being  locked  into  proprietary 
solutions  or  expensive  add-ons 

■  Higher  productivity  through  reusable  components 
and  easier-to-use  development  tools 


complete  SOA  Readiness  Assessment 


Benchmark  Report  that  you  can  use  to: 

.  Evaluate  your  own  state  of  SOA  readiness 
.  Assess  your  company's  SOA  strengths  and 
weaknesses 

.  Support  your  SOA  plans  and  implementation 
strategies 

http://soa.bea.com/cwnov 

Act  now.  Don't  delay.  Whether  you're  already  implementing 
SOA  based  business  integration  or  just  beginning  to  plan, 

BEA  can  help  -  with  the  technology,  solutions,  and  implementation 
services  that  match  your  needs. 

Visit  http://soa.bea.com/cwnov  to  receive  your 
COMPLIMENTARY  SOA  READINESS  ASSESSMENT  Benchmark  Report. 


To  obtain  your 
COMPLIMENTARY 
SOA  Readiness 
Assessment 
Benchmark 
Report,  go  to: 
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The  highly  dependable  HP  BladeSystem  features  Intel®  Xeon™  Processors.  Now  it's  possible  to  react  to  changing  business  conditions  in  real  time— in  seconds. 
Application  deployment  and  reprovisioning  become  an  automated  process.  From  single  console  remote  management  to  19%  power  savings2— the  HP  BladeSystem 
is  designed  to  save  you  time,  money  and,  quite  possibly,  your  sanity.  Which,  of  course,  could  be  the  most  compelling  reason  of  all  to  learn  more. 


THE  SOLUTION 

THE  BENEFITS2 

HP  ProLiant  BL30p  Blade  Server 

•  2  Intel®  Xeon™  Processors  DP  up  to  3.20GHz/2MB’ 

•  23%  savings  on  acquisition  cost 

•  High  density:  Up  to  96  servers  per  rack 

®  19%  less  power  consumption 

•  HP  Systems  Insight  Manager™:  Web-based  networked 
managment  through  a  single  console 

*  93%  fewer  cables 

•  Flexible/Open:  Integrates  with  existing  infrastructure 

8  Hot-swappable  server  design 

•  Rapid  Deployment  Pack:  For  ease  of  deployment 

•  Single  interface  for  integrated  remote  management 

and  ongoing  provisioning  and  reprovisioning 

■BHUBMH 


invent 


Contact  HP  today  for  a  free  IDC  white  paper:  Adapting  to  Change: 
BladeSystem  Moves  into  the  Mainstream 


CLICK 

hp.com/go/Bladesniag1 

CALL 

1-800-282-6672 

option  5,  mention  code  AUFE 

VISIT 

your  local  reseller 

i  Intel's  numbering  Is  not  a  measurement  of  higher  performance.  2.  Based  on  internal  HP  testing;  compared  to  similarly  configured  HP1U,  2P  server.  Intel.  Intel  Inside,  the  Intel  Inside  Logo  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other 

countries.  ©2004  Hewlett-Packard  Development  Company,  L.P. 


